'localhost', 'username' => 'root', 'password' => '', 'database' => 'screens', ); define('UPLOADS','uploads/'); $extensions = array('jpg','jpeg','png','gif','bmp'); if($_SERVER['REQUEST_METHOD'] != 'POST') { error('request method error'); } if(array_key_exists('image', $_FILES)) { $file = $_FILES['image']; $original = $file['name']; $extension = explode('.',$original); $extension = array_pop($extension); $extension = strtolower($extension); //if(!in_array(strtolower(array_pop(explode('.',$file['name'])),$extensions))) { if(!in_array($extension,$extensions)) { error('file extension error.'); } $db = mysqli_init(); $db->real_connect($conf->hostname, $conf->username, $conf->password, $conf->database); $query = "INSERT INTO screens (extension, original) VALUES('$extension','$original')"; $db->query($query); $newId = $db->insert_id; if(move_uploaded_file($file['tmp_name'], UPLOADS . $newId . '.' . $extension)) { echo json_encode(array('type'=>'success','status'=>'Uploaded successfully','file'=>'http://screens.p5dev.com/' . UPLOADS . $newId . '.' . $extension)); exit; } } error('unknown error'); function error($message) { echo json_encode(array('type'=>'error','status'=>$message)); exit; } ?>