<?php
if(isset($_POST['submit'])){
$estensioni = array("jpg", "png", "bmp", "gif");
$errors= array();
$nome=trim($_POST['nome']);
if(!preg_match('/^[a-zA-Z]{2,20}$/', $nome)){
$errors[]="non hai inserito il nome o nome non valido<br />";}
$prezzo=trim($_POST['prezzo'])+0.0;
if($prezzo==0 || !is_numeric($prezzo)){
$errrors[]="prezzo non valido<br />"; }
foreach($_FILES['files']['tmp_name'] as $key => $tmp_name ){
$nomefile = strtolower($key);
$file_name = $key.$_FILES['files']['name'][$key];
$file_size =$_FILES['files']['size'][$key];
$file_tmp =$_FILES['files']['tmp_name'][$key];
$file_type=$_FILES['files']['type'][$key];
if($file_size > 2097152){
$errors[]='La grandezza del file deve essere minore di 2 MB';
}
if(!in_array(strtolower(end(explode('.', $file_name))),$estensioni)){
$errors[] = 'Tipo di file non consentito';
}
$directory="provaF";
$sql = new mysql("localhost", "root", "", "my_db");
$query="INSERT INTO prova(nome, prezzo,immagine,img2,img3,img4)
VALUES('$nome','$prezzo','provaF/$nomefile','provaF/$nomefile2','provaF/$nomefile3','provaF/$nomefile4')";
var_dump($query);
if(!$sql->query($query)) {
echo $sql->error; }
if(empty($errors)==true){
if(is_dir("$directory/".$file_name)==false){
move_uploaded_file($file_tmp,"$directory/".$file_name);
}else{
$new_dir="$directory/".$file_name.time();
rename($file_tmp,$new_dir) ;
}
mysql_query($query);
}else{
print_r($errors);
}
}
if(empty($error)){
echo "Operazione effettuata con successo";
}
}
?>