<?php

include("config.php");
include("auth.php");

if($_POST['uniq_id']){

# first thing we do is create the uniq id so that other forms can interact with it

		$sql = "INSERT INTO cms_content SET uniq_id=?";
		$q = $dbh->prepare($sql);
		$q->execute(array($_POST['uniq_id']));

}

if($_POST['type'] == "photos"){

if(isset($_FILES["FileInput"]) && $_FILES["FileInput"]["error"]== UPLOAD_ERR_OK)
{
	############ Edit settings ##############
	$UploadDirectory	= 'photos/'; //specify upload directory ends with / (slash)
	##########################################

	/*
	Note : You will run into errors or blank page if "memory_limit" or "upload_max_filesize" is set to low in "php.ini".
	Open "php.ini" file, and search for "memory_limit" or "upload_max_filesize" limit
	and set them adequately, also check "post_max_size".
	*/

	//check if this is an ajax request
	if (!isset($_SERVER['HTTP_X_REQUESTED_WITH'])){
		die();
	}


	//Is file size is less than allowed size.
	if ($_FILES["FileInput"]["size"] > 10005242880) {
		die("File size is too big!");
	}

	//allowed file type Server side check
	switch(strtolower($_FILES['FileInput']['type']))
		{
			//allowed file types

			case 'application/x-zip-compressed':

				break;
			default:
				die('Unsupported File!'); //output error
	}

	$File_Name          = strtolower($_FILES['FileInput']['name']);
	$File_Ext           = substr($File_Name, strrpos($File_Name, '.')); //get file extention
	$Random_Number      = rand(0, 9999999999); //Random number to be added to name.
	$NewFileName 		= $_POST['uniq_id'].$Random_Number.$File_Ext; //new file name
	$folder = $_POST['uniq_id'].$Random_Number;
	mkdir('photos/'.$folder);
	if(move_uploaded_file($_FILES['FileInput']['tmp_name'], $UploadDirectory.$NewFileName ))

		$sql = "UPDATE cms_photos SET folder='$folder' WHERE uniq_id=?";
		$q = $dbh->prepare($sql);
		$q->execute(array($_POST['uniq_id']));

		die('Success! File Uploaded.');
	}else{
		die('error uploading File!');
	}

}
else
{
	die('Something wrong with upload! Is "upload_max_filesize" set correctly?');
}


} elseif($_POST['type'] == "movie"){

if(isset($_FILES["FileInput"]) && $_FILES["FileInput"]["error"]== UPLOAD_ERR_OK)
{
	############ Edit settings ##############
	$UploadDirectory	= 'videos/'; //specify upload directory ends with / (slash)
	##########################################

	/*
	Note : You will run into errors or blank page if "memory_limit" or "upload_max_filesize" is set to low in "php.ini".
	Open "php.ini" file, and search for "memory_limit" or "upload_max_filesize" limit
	and set them adequately, also check "post_max_size".
	*/

	//check if this is an ajax request
	if (!isset($_SERVER['HTTP_X_REQUESTED_WITH'])){
		die();
	}


	//Is file size is less than allowed size.
	if ($_FILES["FileInput"]["size"] > 10005242880) {
		die("File size is too big!");
	}

	//allowed file type Server side check
	switch(strtolower($_FILES['FileInput']['type']))
		{
			//allowed file types
            case 'image/png':
			case 'image/gif':
			case 'image/jpeg':
			case 'image/pjpeg':
			case 'text/plain':
			case 'text/html': //html file
			case 'application/x-zip-compressed':
			case 'application/pdf':
			case 'application/msword':
			case 'application/vnd.ms-excel':
			case 'video/mp4':
				break;
			default:
				die('Unsupported File!'); //output error
	}

	$File_Name          = strtolower($_FILES['FileInput']['name']);
	$File_Ext           = substr($File_Name, strrpos($File_Name, '.')); //get file extention
	$Random_Number      = rand(0, 9999999999); //Random number to be added to name.
	$NewFileName 		= $_POST['uniq_id'].$Random_Number.$File_Ext; //new file name

	if(move_uploaded_file($_FILES['FileInput']['tmp_name'], $UploadDirectory.$NewFileName ))
	   {

		$sql = "UPDATE cms_content SET filename='$NewFileName' WHERE uniq_id=?";
		$q = $dbh->prepare($sql);
		$q->execute(array($_POST['uniq_id']));

		die('Success! File Uploaded.');
	}else{
		die('error uploading File!');
	}

}
else
{
	die('Something wrong with upload! Is "upload_max_filesize" set correctly?');
}

} # end checking type