if (isset($_POST["add"])) {
$pdo = Database::connect();
$msg = "";
$permitted = array('application/vnd.ms-excel', 'application/pdf', 'application/msword', 'image/gif', 'image/jpeg', 'image/jpg', 'image/png', 'image/bmp'
,'application/msword', 'application/mspowerpoint', 'application/vnd.ms-powerpoint', 'application/mspowerpoint', 'application/powerpoint', 'application/vnd.ms-powerpoint',
'application/x-mspowerpoint', 'application/mspowerpoint', 'application/x-compressed', 'application/x-zip-compressed', 'application/zip');
if (count($_FILES["file"]) > 0) {
$folderName = "uploads/";
$sql = "INSERT INTO document_upload ( upload_title, upload_category, upload_description, upload_worksheet, upload_lesson_plan, upload_materials, upload_size, upload_type, document_path, uploaded_by, upload_date)
VALUES (:upload_title, ::upload_category, :upload_description, :upload_worksheet, :upload_plan, :upload_materials, :upload_size, :upload_type, :document_path, :uploaded_by, NOW())";
$stmt = $pdo->prepare($sql);
for ($i = 0; $i < count($_FILES["file"]["name"]); $i++) {
if ($_FILES["file"]["name"][$i] <> "") {
if ($permitted) {
$upload_title = $_POST['upload_title'];
$upload_category = $_POST['upload_category'];
$upload_description = $_POST['upload_description'];
$uploaded_by = $_SESSION['user_username'];
$fileSize = $_FILES["file"]["size"][$i];
$fileType = $_FILES["file"]["type"][$i];
$fileName = $_FILES["file"]["name"][$i];
$tmpName = $_FILES["file"]["tmp_name"][$i];
$ext = substr(strrchr($fileName, "."), 1);
$_FILES["file"]["name"][$i] = rand(10000, 990000) . '-' .$fileName;
$filepath = $folderName . $_FILES["file"]["name"][$i];
if (!move_uploaded_file($tmpName, $filepath)) {
$emsg .= "Error while uploadinг file - <strong>" . $_FILES["file"]["name"][$i] . "</strong>. Please try again. <br>";
} else {
$smsg .= "The file <strong>" . $_FILES["file"]["name"][$i] . "</strong> is added successfully. <br>";
/* * ****** insert into database starts ******** */
try {
$stmt->bindValue(":upload_worksheet", $_FILES["file"]["name"][$i], PDO::PARAM_STR);
$stmt->bindValue(":upload_plan", $_FILES["file"]["name"][$i], PDO::PARAM_STR);
$stmt->bindValue(":upload_materials", $_FILES["file"]["name"][$i], PDO::PARAM_STR);
$stmt->bindValue(":upload_size", $fileSize, PDO::PARAM_STR);
$stmt->bindValue(":upload_type", $fileType, PDO::PARAM_STR);
$stmt->bindValue(":document_path", $filepath, PDO::PARAM_STR);
$stmt->bindValue(":upload_title", $upload_title, PDO::PARAM_STR);
$stmt->bindValue(":upload_category", $upload_category, PDO::PARAM_STR);
$stmt->bindValue(":upload_description", $upload_description, PDO::PARAM_STR);
$stmt->bindValue(":uploaded_by", $uploaded_by, PDO::PARAM_STR);
$stmt->execute();
$result = $stmt->rowCount();
if ($result > 0) {
// file uplaoded successfully.
} else {
// failed to insert into database.
}
} catch (Exception $ex) {
$emsg .= "<strong>" . $ex->getMessage() . "</strong>. <br>";
}
/* * ****** insert into database ends ******** */
}
} else {
$emsg .= "This file <strong>" . $_FILES["file"]["name"][$i] . "</strong> isn't permitted. <br>";
}
}
}
$msg .= (strlen($smsg) > 0) ? successMessage($smsg) : "";
$msg .= (strlen($emsg) > 0) ? errorMessage($emsg) : "";
} else {
$msg = errorMessage("You must add at least one file.");
}
}
$pdo = Database::disconnect();
?>
