format("Y/m/d"); $tTime =Explode(":", date('H:i:s')); $svtTime = $tTime[0].":".$tTime[1].":".$tTime[1]; if(isset($_FILES['file'])){ $ext = explode('.', $_FILES['file']['name']); $allow_ext = array('PNG','png','JPG' ,'jpg','GIF', 'gif'); $target_path = basename( $_FILES['file']['name']); $target_path = mysql_real_escape_string($target_path); $filename = $_FILES['file']['name']; $fext = pathinfo($filename, PATHINFO_EXTENSION); $itemCode = $_POST['custID']; if(!in_array($fext,$allow_ext)){ $SysMessage='Invalid file extension. Please select image format only...'; $ror=true; }else { if(move_uploaded_file($_FILES['file']['tmp_name'], 'MyProfilePicture/'.$itemCode.'---'.$target_path)) { $myFile = $itemCode ."---" . $filename; $fullFile=mysql_real_escape_string($myFile); //duplicate image is not allowed mysql_query("UPDATE `vts_customers` SET `profile_pic`='$fullFile' WHERE `c_id`='$itemCode'"); mysql_query("DELETE FROM `vts_profile_images` WHERE `cust_id`='$custID'"); $sql="INSERT INTO `vts_profile_images` (`pro_id`,`cust_id`,`file_path`) VALUES('','$custID','$fullFile')"; if(!mysql_query($sql)) { die('Error: ' . mysql_error()); }else{ $SysMessage= "Image upload complete... " . $fullFile; } //echo "
Select picture in this format: (png, jpg, gif)