<?php

// The flash-upload doesn't send our session, so we create it again

if(isset($_POST['PHPSESSID']))
{
    session_id($_POST['PHPSESSID']);
}

include("admin-load.php"); // Load config

if($_SERVER['REQUEST_METHOD'] == "POST") // Form inserted?
{
    if( ! empty($_FILES['post_file']['name'])) // Upload succesful?
    {
        if(CONF_UPLOAD_MONTH == 1) // Year-month?
        {
            // Year folder exists?

            if( ! is_dir("../" . CONF_UPLOAD_FOLDER . "/" . date("Y")))
            {
                if(ini_get("safe_mode")) // Safe mode on?
                {
                    $Connection = ftp_connect(CONF_FTP, 21);
                    ftp_pasv($Connection, TRUE);
                    $Login = ftp_login($Connection, CONF_FTP_USER, CONF_FTP_PASS);
                    ftp_mkdir($Connection, CONF_FTP_ROOT . "/" . CONF_UPLOAD_FOLDER . "/" . date("Y"));
                    ftp_site($Connection, "CHMOD 0777 " . CONF_FTP_ROOT . "/" . CONF_UPLOAD_FOLDER . "/" . date("Y"));
                    ftp_close($Connection);
                }
                else
                {
                    mkdir("../" . CONF_UPLOAD_FOLDER . "/" . date("Y"));
                    chmod("../" . CONF_UPLOAD_FOLDER . "/" . date("Y"), 0777);
                }
            }

            // Month folder exists?

            if( ! is_dir("../" . CONF_UPLOAD_FOLDER . "/" . date("Y") . "/" . date("m")))
            {
                if(ini_get("safe_mode")) // Safe mode on?
                {
                    $Connection = ftp_connect(CONF_FTP, 21);
                    ftp_pasv($Connection, TRUE);
                    $Login = ftp_login($Connection, CONF_FTP_USER, CONF_FTP_PASS);
                    ftp_mkdir($Connection, CONF_FTP_ROOT . "/" . CONF_UPLOAD_FOLDER . "/" . date("Y") . "/" . date("m"));
                    ftp_site($Connection, "CHMOD 0777 " . CONF_FTP_ROOT . "/" . CONF_UPLOAD_FOLDER . "/" . date("Y") . "/" . date("m"));
                    ftp_close($Connection);
                }
                else
                {
                    mkdir("../" . CONF_UPLOAD_FOLDER . "/" . date("Y") . "/" . date("m"));
                    chmod("../" . CONF_UPLOAD_FOLDER . "/" . date("Y") . "/" . date("m"), 0777);
                }
            }

            move_uploaded_file($_FILES['post_file']['tmp_name'], "../" . CONF_UPLOAD_FOLDER . "/" . date("Y") . "/" . date("m") . "/" . $_FILES['post_file']['name']); // Upload
        }
        else
        {
            move_uploaded_file($_FILES['post_file']['tmp_name'], "../" . CONF_UPLOAD_FOLDER . "/" . $_FILES['post_file']['name']); // Upload
        }

        $DB->query_execDB("
            INSERT INTO ot_files
            SET id = 'NULL',
                file_author = '" . USER_ID . "',
                file_name = '" . stripslashes($_FILES['post_file']['name']) . "',
                file_size = '" . $_FILES['post_file']['size'] . "',
                file_date = NOW()
        "); // Insert in DB
    }
}

echo "OK";

?>