FM / Client

/home/techb158/immovalet.ca/Client

Name	Size	Mode	Actions
CVUploadedFiles/	-	0777	rm
img/	-	0777	rm
Inc/	-	0777	rm
stripe-php/	-	0777	rm
alertes_jumelages.php	5657	0666	edit dl rm
archives_cv.php	5738	0666	edit dl rm
authorizedpage.php	1216	0666	edit dl rm
counter.php	3513	0666	edit dl rm
CV_Upload.php	4180	0666	edit dl rm
dashboard.php	10141	0666	edit dl rm
footer.php	2440	0666	edit dl rm
head.php	3319	0666	edit dl rm
header.php	1162	0666	edit dl rm
mes_applications.php	7970	0666	edit dl rm
mes_factures.php	7710	0666	edit dl rm
mes_produits.php	6551	0666	edit dl rm
mes_rapports.php	6239	0666	edit dl rm
modifier_profil.php	22295	0666	edit dl rm
plan_valeurs.php	7572	0666	edit dl rm
plan_valeurs_checkout.php	8612	0666	edit dl rm
print_invoice.php	4583	0666	edit dl rm
removefile.php	1201	0666	edit dl rm
submit_checkout.php	4143	0666	edit dl rm
upload.php	2269	0666	edit dl rm

Edit: /home/techb158/immovalet.ca/Client/upload.php (2269B)

<?php
//include_once '../includes/db_connect.php';
//include_once '../includes/psl-config.php';
include_once '../includes/db_connect.php';
include_once '../includes/functions.php';
sec_session_start();
//$target_dir = "Client/dist/img";
if(isset($_FILES['file'])) {

//$_POST["user_image"];
//$imgFile = $_POST['file']['name'];
  $tmp_dir = $_FILES['file']['tmp_name'];
  $imgSize = $_FILES['file']['size'];
  $imgFile = $_FILES['file']['name'];
   if(empty($imgFile)){
   //$errMSG = "Please Select Image File.";
   header('Location: modifier_profil.php?error=Veuillez sélectionner votre fichier image.');
    exit();
  }
  else
  {
	  $Admin_ID=  $_SESSION['user_id'];
   $target = './img'; // upload directory
   $upload_dir=$target.'/'.$Admin_ID;

if (!file_exists($upload_dir)) {
			mkdir($upload_dir, 0777);
		}
$upload_dir=$upload_dir.'/';
   $imgExt = strtolower(pathinfo($imgFile,PATHINFO_EXTENSION)); // get image extension
  
   // valid image extensions
   $valid_extensions = array('jpeg', 'jpg', 'png', 'gif'); // valid extensions
   
   // rename uploading image
   $userpic = rand(1000,1000000).".".$imgExt;
    
   // allow valid image file formats
   if(in_array($imgExt, $valid_extensions)){   
    // Check file size '5MB'
    if($imgSize < 5000000)    {
     move_uploaded_file($tmp_dir,$upload_dir.$userpic);
    }
    else{
     //$errMSG = "Sorry, your file is too large.";
	 header('Location: modifier_profil.php.php?error=Sorry, your file is too large.');
    exit(); 
    }
   }
   else{
	   header('Location: modifier_profil.php.php?error=Sorry, only JPG, JPEG, PNG & GIF files are allowed.');
    exit(); 
    //$errMSG = "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";  
   }
  }
  
  // if no error occured, continue ....
  if(!isset($errMSG))
  {
	  $username = $_SESSION['username'];
   if ($mysqli->query("UPDATE Clients SET User_img ='$userpic' WHERE Username ='".$username."'")) {
	//header('Location: modifier_profil.php.php?error=new record succesfully inserted');
	//exit(); 
	}
   else
   {
	   header('Location: modifier_profil.php.php?error=error while inserting....');
    exit(); 
    //$errMSG = "error while inserting....";
   }
  }
  
}
?>

query("UPDATE Clients SET User_img ='$userpic' WHERE Username ='".$username."'")) { //header('Location: modifier_profil.php.php?error=new record succesfully inserted'); //exit(); } else { header('Location: modifier_profil.php.php?error=error while inserting....'); exit(); //$errMSG = "error while inserting...."; } } } ?>