($directory)"));
if($_POST['upload'])
{
//cheking is file selected
if($_FILES['file']['name']=="")
die(stopUpload('alert', $DLG['select_file']));
$info = swampy_pathinfo($_FILES['file']['name']);
$ext = ($info['extension'] != "") ? ".".$info['extension'] : "";
$file = ($_POST['filename'] != "") ? $_POST['filename'].$ext : $info['filename'].$ext;
$file = format_filename($file);
//cheking file name
if(ereg("[^a-zA-Z0-9._-]", $file))
die(stopUpload('alert',$DLG['invalid_filename']));
//check is file name exists
if(file_exists($directory.$file))
die(stopUpload('alert', $DLG['file_exists']));
umask(0002);
//uploadig file
if(!copy($_FILES['file']['tmp_name'], $directory.$file))
die(stopUpload('error', $DLG['upload_failure']));
$msg = rawurlencode("'$file' {$DLG['upload_success']}
{$DLG['insert_uploaded']}");
die(stopUpload('done', $msg));
}
?>
