D0R4H4X0R SH3LL

Current File : D:/INETPUB/VHOSTS/lensai.com/httpdocs/new/admin/mail_controller.php

<?php
session_start();
$id=$_SESSION['id'];
include_once('config.php');

if(isset($_POST['compose']))
{
	
	
	$user_id=$_POST['user_id'];
	$user_name=$_POST['username'];
	$subject=$_POST['subject'];
	$message=$_POST['message'];
	
		$j = 0; //Variable for indexing uploaded image 
    
	$target_path1 = "upload/"; //Declaring Path for uploaded images
    for ($i = 0; $i < count($_FILES['file']['name']); $i++) {//loop to get individual element from the array

        $validextensions = array("jpeg", "jpg", "png","zip","pdf","doc","gif","sql","txt");  //Extensions which are allowed
        $ext = explode('.', basename($_FILES['file']['name'][$i]));//explode file name from dot(.) 
        $file=$_FILES['file']['name'][$i];
	
		
		$file_extension = end($ext); //store extensions in the variable
        
		$target_path = $target_path1.$file;//set the target path with a new name of image
        
		$j = $j + 1;//increment the number of uploaded images according to the files in array       
            move_uploaded_file($_FILES['file']['tmp_name'][$i],$target_path);//if file moved to uploads folder
	}
	$file=implode(",",$_FILES['file']['name']);
	$insert="insert into mailbox (user_id,subject,message,file,create_by_id)values('$user_id','$subject','$message','$file','$id')";
	$exe=mysql_query($insert);
	header('location:index.php?p=compose');
}
?>