From fcf999e4270007dda1ae2252a22842363927c9fa Mon Sep 17 00:00:00 2001
From: Luke Ogburn <21106956+OakBaron@users.noreply.github.com>
Date: Thu, 26 Sep 2019 00:18:24 -0400
Subject: [PATCH] started working on adding temp file upload feature

---
 index.php         | 10 +++++++++-
 upload/submit.php | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+), 1 deletion(-)
 create mode 100644 upload/submit.php

diff --git a/index.php b/index.php
index b373a38..5388017 100644
--- a/index.php
+++ b/index.php
@@ -32,7 +32,15 @@
         }
         ?>
     </div>
+
+    <div class=fileUpload>
+      <form action="" method=POST>
+        <input type=file name=fileUpload[] multiple>
+        <button type=submit>
+      </form>
+    </div>
+
     <input type=checkbox id=boo>
     <div id=cookie><p><label for=boo>This site does <b>not</b> use cookies. You're welcome.</label></p></div>
   </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/upload/submit.php b/upload/submit.php
new file mode 100644
index 0000000..aa663b2
--- /dev/null
+++ b/upload/submit.php
@@ -0,0 +1,46 @@
+<?php
+
+function randID($length = 4) {
+  //Note that $length must be even, or it will round down
+  do{
+    if(function_exists("random_bytes")){
+      $bytes = random_bytes(ceil($length/2));
+    }elseif(function_exists("openssl_random_pseudo_bytes")){
+      $bytes = openssl_random_pseudo_bytes(ceil($length/2));
+    }else{
+      throw new Exception("No cryptographically secure random function available.");
+    }
+    $x = substr(bin2hex($bytes), 0, $length);
+    $id = strtolower(gmp_strval(gmp_init($x, 36), 62));
+  } while(!verifyID($id));
+  return $id;
+}
+
+$pid = randID();
+$file = $_FILES["images"];
+
+if($file["name"][0]!=NULL){
+  for($i=0; $i<sizeof($file["name"]); $i++){
+    $ext = explode('.', $file["name"][$i]);
+    $ext = strtolower($ext[sizeof($ext)-1]);
+    $allowedExt = array('jpg', 'jpeg', 'png', 'doc', 'docx', 'pdf');
+    if(in_array($ext, $allowedExt)){
+      if(!$file["error"][$i]){
+        $imgDest = randID().".".$ext;
+        $img .= $imgDest.",";
+        $dest = $_SERVER['DOCUMENT_ROOT']."/forum/images/".$imgDest;
+        move_uploaded_file($file["tmp_name"][$i], $dest);
+      }else{
+        echo "Error uploading file";
+        exit();
+      }
+    }else{
+      msg("Bad file type.");
+      header("Location: /post");
+      exit(); //this is needed for some reason
+    }
+  }
+}else{
+  $img = NULL;
+}
+?>