Aufräumarbeiten

dashboard/#upload.php

@@ -0,0 +1,51 @@
+<?php
+require_once("../config.inc.php");
+//check if form is submitted
+if (isset($_POST['submit']))
+{
+    $filename = $_FILES['file1']['name'];
+
+    //upload file
+    if($filename != '')
+    {
+    echo $filename;
+    exit;
+    
+        $ext = pathinfo($filename, PATHINFO_EXTENSION);
+        $allowed = ['pdf', 'txt', 'doc', 'docx', 'png', 'jpg', 'jpeg',  'gif',  'xlsx'];
+    
+        //check if file type is valid
+        if (in_array($ext, $allowed))
+        {
+            // get last record id
+            $result_name = $db->query("select max(id) as id from jumi_uploads");
+
+
+            if (count($result) > 0)
+            {
+                $row    = $result->fetch_array()
+                $filename = ($row['id']+1) . '-' . $filename;
+            }
+            else
+                $filename = '1' . '-' . $filename;
+
+            //set target directory
+            $path = 'uploads/';
+                
+            $created = @date('Y-m-d H:i:s');
+            move_uploaded_file($_FILES['file1']['tmp_name'],($path . $filename));
+            
+            // insert file details into database
+            $sql = "INSERT INTO jumi_uploads (filename, created) VALUES('$filename', '$created')";
+            mysqli_query($con, $sql);
+            header("Location: test2.php?st=success");
+        }
+        else
+        {
+            header("Location: test2.php?st=error");
+        }
+    }
+    else
+        header("Location: test2.php");
+}
+?>

dashboard/test.php

@@ -0,0 +1,26 @@
+<?php
+## INDEX gegen DB
+if (!isset($_SESSION)) {
+    session_start();
+}
+#$_SESSION['sessionid'] = session_id();
+include_once '../classes/TestProjektSmarty.class_subdir.php';
+require_once("../config.inc.php");
+$smarty       = new SmartyAdmin();
+if(!rechte('__noright__', $uid)){
+ echo "<meta http-equiv=\"refresh\" content=\"0; URL=error.php\">";
+ exit;
+}
+$templatename = substr(basename($_SERVER['PHP_SELF']), 0, -3) . "html";
+require_once "../language/german.inc.php";
+
+
+
+$result_name = $db->query("SELECT vorname, nachname, mail FROM jumi_admin WHERE uid='$uid'");
+$row_name    = $result_name->fetch_array();
+$smarty->assign('startseite_name', "$row_name[vorname] $row_name[nachname]");
+
+
+$smarty->assign('action', "$action");
+$smarty->display("modern/dashboard/$templatename");
+?>