<?php
	if (!empty($_FILES["upf"]))
	{
		date_default_timezone_set("Europe/Sofia");
		$upuid=$_POST["upuid"];
		$tm=$_POST["tm"];
		$t=time();
		$today = date("Y-m-d-H-i-s", $t);
		$rnd1=rand(1000,9999);
		$rnd2=rand(1000,9999);
		$array=explode('.', $_FILES['upf']['name']);
		$extension=end($array);
		$extension=strtolower($extension);
		if (($extension=="php") || ($extension=="htm") || ($extension=="html"))
		{
			$extension="not_allowed";
		}
		$stat=move_uploaded_file($_FILES["upf"]["tmp_name"], "./up/id-".$today."-".$rnd1."-".$rnd2.".".$extension."");
		if ($stat)
		{
			include("./conn.php");
			$up=mysqli_query($db, "INSERT INTO `files` (`i`, `u`, `f`, `e`, `tm`) VALUES (NULL, '".$upuid."', 'id-".$today."-".$rnd1."-".$rnd2.".".$extension."','".$extension."', '".$tm."');");
			if ($up)
			{
				print("<script> window.parent.uplok(); </script>");
			}
			else
			{
				print("<script> window.parent.uplerr(); </script>");
			}
			include("./close.php");
		}
		else
		{
			print("<script> window.parent.uplerr(); </script>");
		}
	}
	else
	{
		print("<script> window.parent.uplem(); </script>");
	}
?>