Upload açığını nasıl kapatabilirim

Katılım
24 Haz 2018
Tepki puanı
16
Rating - 0%
PHP:
<?
include "ayar.php";
if(get_user_id() == ""){

    header("Location: ".$ayar["url"]);
    exit;

}

if($_GET["resize"] == "true"){

    $gln =  json_decode($_POST["dat"], true);

    // get the image size
    $file = "img/avatar/".$u["avatar"];
    $jpeg_quality = 90;
    list($targ_w, $targ_h, $type, $attr) = getimagesize($file);
    $targ_w = $targ_h = 200;
    $jpeg_quality = 90;
    $img_r = imagecreatefromjpeg($file);
    $dst_r = ImageCreateTrueColor( $targ_w, $targ_h );

    imagecopyresampled($dst_r,$img_r,0,0,$gln[0],$gln[1],$targ_w,$targ_h,$gln[2],$gln[3]);
    $imagename = KodOlustur().".jpg";
    imagejpeg($dst_r,"img/avatar/".$imagename,$jpeg_quality);
    $sql = "UPDATE uyeler SET avatar = '".$imagename."' WHERE id=".$u["id"];
    if ($db->query($sql) === TRUE) {echo $imagename;}
}else{


    $path = $_FILES['file']['name'];
    $ext = pathinfo($path, PATHINFO_EXTENSION);
    $imagename = KodOlustur().".".$ext;
    $source = $_FILES['file']['tmp_name'];
    $target = "img/avatar/".$imagename;
    move_uploaded_file($source, $target);
    unlink("img/avatar/".$u["avatar"]);

    $sql = "UPDATE uyeler SET avatar = '".$imagename."' WHERE id=".$u["id"];
    if ($db->query($sql) === TRUE) {echo $imagename;}

}
 
131,557Konular
3,269,174Mesajlar
315,409Kullanıcılar
Elis.Son Üye
Üst Alt