/home/techb158/immovalet.ca/report/Client
NameSizeModeActions
CVUploadedFiles/-0777rm
img/-0777rm
Inc/-0777rm
stripe-php/-0777rm
alertes_jumelages.php56570666editdlrm
archives_cv.php57380666editdlrm
authorizedpage.php12160666editdlrm
counter.php35130666editdlrm
CV_Upload.php41800666editdlrm
dashboard.php101410666editdlrm
footer.php24400666editdlrm
head.php33190666editdlrm
header.php11620666editdlrm
mes_applications.php79700666editdlrm
mes_factures.php77100666editdlrm
mes_produits.php65510666editdlrm
mes_rapports.php62390666editdlrm
modifier_profil.php222950666editdlrm
plan_valeurs.php75720666editdlrm
plan_valeurs_checkout.php86120666editdlrm
print_invoice.php45830666editdlrm
removefile.php12010666editdlrm
submit_checkout.php41430666editdlrm
upload.php22690666editdlrm
Edit: /home/techb158/immovalet.ca/report/Client/CV_Upload.php (4180B)
query($query); $row = $result->fetch_assoc(); $Client_User_Name = $row['Username']; $Client_Company_Name = $row['First_Name'] .' '. $row['Last_name']; $C_ID = $row['C_ID']; if($C_ID != "" && $Client_User_Name != "") { //, 'file/pdf', 'file/xls', 'file/xlsx', 'file/csv', 'file/doc', 'file/docx' //$arr_file_types = ['image/png', 'image/gif', 'image/jpg', 'image/jpeg', 'application/pdf', 'file_extension/xls', 'file_extension/xlsx', 'text/csv','application/vnd.ms-excel', 'application/vnd.msexcel', 'file_extension/doc', 'file_extension/docx', 'application/msword' , 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet']; $arr_file_types = ['application/pdf', 'file_extension/doc', 'file_extension/docx', 'application/msword' , 'application/vnd.openxmlformats-officedocument.wordprocessingml.document']; if (!(in_array($_FILES['file']['type'], $arr_file_types))) { echo "Téléchargement de type de fichier non pris en charge."; return; } if($_FILES['file']['size'] > 800000){ echo "Le fichier téléchargé dépasse la taille maximale de téléchargement."; return; } //echo $order_id. "
"; //echo $ord_cli_ord_no. "
"; //echo "Upload: " . $_FILES["file"]["name"] . "
"; //echo "Type: " . $_FILES["file"]["type"] . "
"; //echo "Size: " . ($_FILES["file"]["size"] / 1024) . " kB
"; //echo "Stored in: " . $_FILES["file"]["tmp_name"]; $Upload_Time = date("H:i:s"); $Upload_Date = date("Y-m-d"); $File_Name = str_replace(' ','',$_FILES["file"]["name"]); $File_Type = $_FILES["file"]["type"]; $File_Size = $_FILES["file"]["size"]; $target= './CVUploadedFiles'; if (!file_exists($target)) { mkdir($target, 0777); } $targets=$target.'/'.$C_ID; if (!file_exists($targets)) { mkdir($targets, 0777); } $order=$target.'/'.$C_ID.'/'.$Client_User_Name; if (!file_exists($order)) { mkdir($order, 0777); } $orderid=$order.'/'; $File_Path = $orderid; //$User=$targets.'/'.$Client_Company_Name.'/'.$Client_User_Name.'/'; //if (!file_exists($User)) { // mkdir($targets, 0777); //} //$productID=preg_replace('/[\s]+.*/','',$productID); //$query = "SELECT * FROM CV_File_Upload Where C_ID ='".$C_ID."' AND Username ='".$Client_User_Name."' AND File_Name ='".$File_Name."'"; $query = "SELECT * FROM CV_File_Upload Where C_ID ='".$C_ID."' AND Username ='".$Client_User_Name."'"; $result = $mysqli->query($query); $Managers = $result->fetch_assoc(); if ($result->num_rows == 1) { // A user with this email address already exists echo "Un fichier avec cette information existe déjà."; }else{ move_uploaded_file(str_replace(' ','',$_FILES['file']['tmp_name']), $orderid . str_replace(' ','',$_FILES['file']['name'])); if ($insert_stmt = $mysqli->prepare("INSERT INTO CV_File_Upload (C_ID, Username, File_Name, File_Type, File_Size, File_Path, Upload_Time, Upload_Date) VALUES (?, ?, ?, ?, ?, ?, ?, ?)")) { $insert_stmt->bind_param('ssssssss',$C_ID,$Client_User_Name,$File_Name,$File_Type,$File_Size,$File_Path,$Upload_Time,$Upload_Date); //header('Location: modifier_profil.php?error='.$insert_stmt->error); if (! $insert_stmt->execute()) { //echo $insert_stmt->error; echo "Échec de téléchargement du fichier pour '" . $Client_Company_Name .' - Nom de fichier: '. $_FILES['file']['name'] . "'"; }else { echo "Fichier chargé avec succès pour '" . $Client_Company_Name .' - Nom de fichier: '. $_FILES['file']['name'] . "|" .$File_Path."".$_FILES['file']['name']. "|".$_FILES['file']['name'].""; } //echo "File uploaded successfully."; } } }else { echo "Please contact our support for this error (Télécharger un CV)"; } ?>