Major Additions - Image/File Uploader

Coded by tnguy3n for http://www.all4actions.net
Live Demo: http://www.all4actions.net (create a thread or reply)

Well, I wrote this lil script for my board so that my member can upload images/pics since my board host lots of images of movie stars and all such, and database grows really fast if using Attachment Manager. It's been released at my forum for a while now, and didn't have time to post it here... it's fully tested, but maybe there'r still few bugs may be found.

What can you do with this script?
- Allow certain membergroups to access the script
- Upload img/banner in signature (sig hosting)
- You can set the max width & height, in case ppl upload huge image & break table cell of your forum
- You can set max filesize and allow certain extensions to be uploaded

lots more features will be added to v.2 of the script, admin can add file extensions, filesize and keep track on upload dir via Admin CP.

P.S. Due to mah busy schedule, support for this hack will be very limited ... You guys can find me on at my board sometimes, or post bugs in this thread: http://all4actions.net/forums/showthread.php?t=3389

------

If you want certain membergroups to see this File/Image Uploader option, you can use conditional in your template, i.e:

<if condition="(is_member_of($bbuserinfo, 5)) OR (is_member_of($bbuserinfo, 6)) OR (is_member_of($bbuserinfo, 7)))">
	[<a href="uploader.php?$session[sessionurl]" onClick="return popup(this, 'uploader');">Image Uploader</a>]</if>

[TCB]

Thanks, I will try


While editing the showthread_quickreply template, I kinda lost it after this:

<!--######## Scroll down about 3/4 of the page, look for: ######## -->

Look for your signature fieldset, and ABOVE IT, ADD:

What is the exact line that I need to look for, so that I can put the next thing above it? Because after 'look for' there's nothing to look for :surprised:

[tnguy3n]

Originally Posted by TCB

Thanks, I will try


While editing the showthread_quickreply template, I kinda lost it after this:


What is the exact line that I need to look for, so that I can put the next thing above it? Because after 'look for' there's nothing to look for :surprised:

in showthread_quickreply, find:

			<tr>
				<td align="$stylevar[left]">
				
					<fieldset class="fieldset" style="margin:$stylevar[formspacer]px 0px 0px 0px">
						<legend>$vbphrase[options]</legend>
						<div>
							<if condition="$bbuserinfo['signature']">
								<div style="float:$stylevar[right]">
									<label for="cb_signature"><input type="checkbox" name="signature" value="1" id="cb_signature" tabindex="5" checked="checked" />$vbphrase[show_your_signature]</label>
								</div>
							</if>
							<label for="qr_quickreply"><input type="checkbox" name="quickreply" value="1" id="qr_quickreply" accesskey="w" tabindex="4" />$vbphrase[quote_message_in_reply]</label>
						</div>
					</fieldset>
				
				</td>
			</tr>

Above it, add:

			<tr>
				<td align="$stylevar[left]">
				
					<fieldset class="fieldset" style="margin:$stylevar[formspacer]px 0px 0px 0px">
						<legend>Smilies & Image Uploader Option</legend>							
	<if condition="(is_member_of($bbuserinfo, 5)) OR (is_member_of($bbuserinfo, 6)) OR (is_member_of($bbuserinfo, 7)) OR (is_member_of($bbuserinfo, 8)) OR (is_member_of($bbuserinfo, 9)) OR (is_member_of($bbuserinfo, 11))">
	<div style="float:$stylevar[right]"><lable>[<a href="uploader.php?$session[sessionurl]" onClick="return popup(this, 'notes');">Image Uploader</a>]</lable></div></if>
					</fieldset>
				
				</td>
			</tr>

[Milorad]

what happens if a file already exists?

if its overwritten is there a way to make it generate an error instead?

[tnguy3n]

Originally Posted by Milorad

what happens if a file already exists?

if its overwritten is there a way to make it generate an error instead?

It won't overwrite, but to print an error message instead.

[Natch]

What about security issues - will it test to see if the file is an image ?

Reason I ask, is that with a tool like this, someone could upload a FTP php script and then access your whole server with web-server privileges...

[tnguy3n]

Originally Posted by Natch

What about security issues - will it test to see if the file is an image ?

Reason I ask, is that with a tool like this, someone could upload a FTP php script and then access your whole server with web-server privileges...

You can set certain file extensions to be uploaded. Default set: jpg, jpeg, gif, png

[Natch]

Just checking that it will reject evilscript.jpg.php ?

[tnguy3n]

Originally Posted by Natch

Just checking that it will reject evilscript.jpg.php ?

I used strrchr() function which searches from the end of the filename; therefore, .php will match as in evilscript.jpg.php.

[Natch]

I'll shaddup now then

[Ber|Art]

Thank, very nice addition