From 44f3e91602b186b363ca6ec7dfe1cfd65739d8b4 Mon Sep 17 00:00:00 2001
From: Savetheinternet <savetheinternet@n0v4.com>
Date: Wed, 3 Nov 2010 20:16:08 +1100
Subject: Added a file hash in the database. Will be implemented later.

---
 post.php | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

(limited to 'post.php')

diff --git a/post.php b/post.php
index 22aba6af..ab7ba05f 100644
--- a/post.php
+++ b/post.php
@@ -116,6 +116,7 @@
 			$post['width'] = $size[0];
 			$post['height'] = $size[1];
 			
+			// Check if the image is valid
 			if($post['width'] < 1 || $post['height'] < 1) {
 				unlink($post['file']);
 				error(ERR_INVALIDIMG);
@@ -126,7 +127,10 @@
 				error(ERR_MAXSIZE);
 			}
 			
+			$post['filehash'] = md5_file($post['file']);
 			$post['filesize'] = filesize($post['file']);
+			
+			// Create a thumbnail
 			$thumb = resize($post['extension'], $post['file'], $post['thumb'], THUMB_WIDTH, THUMB_HEIGHT);		
 			$post['thumbwidth'] = $thumb['width'];
 			$post['thumbheight'] = $thumb['height'];
@@ -140,7 +144,7 @@
 		
 		if($OP) {
 			mysql_query(
-				sprintf("INSERT INTO `posts` VALUES ( NULL, NULL, '%s', '%s', '%s', '%s', '%s', '%d', '%d', '%s', '%d', '%d', '%s', '%d', '%d', '%d', '%s', '%s', '%s' )",
+				sprintf("INSERT INTO `posts` VALUES ( NULL, NULL, '%s', '%s', '%s', '%s', '%s', '%d', '%d', '%s', '%d', '%d', '%s', '%d', '%d', '%d', '%s', '%s', '%s', '%s' )",
 					$post['subject'],
 					$post['email'],
 					$post['name'],
@@ -156,12 +160,13 @@
 					$post['height'],
 					$post['filesize'],
 					$post['filename'],
+					$post['filehash'],
 					$post['password'],
 					mysql_real_escape_string($_SERVER['REMOTE_ADDR'])
 				), $sql) or error(mysql_error($sql));
 		} else {
 			mysql_query(
-				sprintf("INSERT INTO `posts` VALUES ( NULL, '%d', '%s', '%s', '%s', '%s', '%s', '%d', '%d', '%s', '%d', '%d', '%s', '%d', '%d', '%d', '%s', '%s', '%s' )",
+				sprintf("INSERT INTO `posts` VALUES ( NULL, '%d', '%s', '%s', '%s', '%s', '%s', '%d', '%d', '%s', '%d', '%d', '%s', '%d', '%d', '%d', '%s', '%s', '%s', '%s' )",
 					$post['thread'],
 					$post['subject'],
 					$post['email'],
@@ -178,6 +183,7 @@
 					$post['has_file']?$post['height']:null,
 					$post['has_file']?$post['filesize']:null,
 					$post['has_file']?$post['filename']:null,
+					$post['has_file']?$post['filehash']:null,
 					$post['password'],
 					mysql_real_escape_string($_SERVER['REMOTE_ADDR'])
 				), $sql) or error(mysql_error($sql));
-- 
cgit v1.3