access error: ".$ref." - ".$_COOKIE['atsuploads']."

If you're seeing this error, it means your browser is not sending 'referral' data to our upload management tool.

"; $expire = time(); exit; } } /* if($xmbuser != "SkepticOverlord"){ echo "member uploads are temporarily disabled"; exit; } */ // require "./xmb.php"; // echo $ref; require_once "/home/abovetopsecret/aboveboard/config.php"; mysql_pconnect($dbhost, $dbuser, $dbpw); mysql_select_db($dbname); require_once "/home/abovetopsecret/public_html/forum/ats_xmb_functions.php"; // $db = new dbstuff; $tempcache = ""; // mysql_pconnect("10.0.0.226", "ats001", "deny6yhn"); // mysql_connect("localhost", "denyignorance", "deny3drv8"); // mysql_select_db("ats_db"); $directory = ""; $sizecheck = 1; $staffupload == "no"; if($xmbuser) { $query = mysql_query("SELECT * FROM xmb_members WHERE username='$xmbuser'"); $store = mysql_query("SELECT * FROM ats_store WHERE member='$xmbuser'"); $store2 = mysql_fetch_array($store); $storequota = $store2['upload']; $num_rows = mysql_num_rows($query); if ($num_rows == 0) {exit;}else{ $userquery = mysql_fetch_array($query); $status = $userquery[status]; if($status == "Administrator" || $status == "Moderator" || $status == "Super Moderator"){ $sizecheck = 1; $uploadmaxsize = 128000; $maxsize = 786000; $dbuser = $xmbuser; }else{ $sizecheck = 1; $uploadmaxsize = 128000; $maxsize = 256000; if($userquery['postnum'] > 1000){$uploadmaxsize = 512000;} if($userquery['postnum'] > 500 && $userquery[$postnum] < 1000){$uploadmaxsize = 320000;} if($userquery['postnum'] > 24 && $userquery[$postnum] < 500){$uploadmaxsize = 256000;} if($userquery['postnum'] < 25){ $uploadmaxsize = 0; $maxsize = 0; echo $xmbuser.", you must have at least 25 posts to use the upload feature, you have ".$userquery['postnum']." posts."; exit; } $dbuser = $xmbuser; } } }else{ exit; } /* echo $_POST[fileupload]."-
"; echo $_POST[upload]."-
"; $thefile = $_FILES[userfile]; echo $thefile[name]."-
"; print_r($_POST); print_r($_FILES); */ $htmltop="

Use The New Media Portal For Uploads "; $htmlbottom="

"; $uploadform1 = ""; $formfooter = ""; $uploadform_upload = ""; if ($_GET['delete']){ $delete = $_GET['delete']; $deletefile = $delete; // unlink($deletefile); $query = mysql_query("UPDATE xmb_uploads SET status = 'deleted' WHERE thefile = '$delete'"); $uploadform = $uploadform1.""; } $maxsize = ($maxsize + $storequota); $sizeleft = $maxsize; $query = mysql_query("SELECT * FROM xmb_uploads WHERE username = '$dbuser' and status = 'live'"); while($thesize = mysql_fetch_array($query)){$sizeleft = $sizeleft - $thesize['thefilesize'];} if($_POST['fileupload']){ $thefile = $_FILES[userfile]; $filename = basename($thefile[name]); $userfile_size = $thefile[size]; $userfile_type = $thefile[type]; $tempfile = $thefile[tmp_name]; $filename = str_replace(".php", ".html", $filename); $filename = str_replace(" ", "_", $filename); $filename = str_replace("'", "", $filename); $filename = str_replace("\"", "", $filename); $filename = str_replace("/", "", $filename); $filename = str_replace("&", "-", $filename); $filename = str_replace("~", "", $filename); $filename = str_replace("^", "", $filename); $filename = str_replace("(", "", $filename); $filename = str_replace(")", "", $filename); $filename = str_replace("%", "", $filename); $filename = str_replace("*", "", $filename); $filename = str_replace("#", "", $filename); $filename = str_replace("@", "", $filename); $filename = str_replace("!", "", $filename); $filename = str_replace("+", "", $filename); $filename = str_replace("=", "", $filename); $querynum = mysql_query("SELECT * FROM xmb_uploads"); if($sizecheck == 1){ $filename = "ats".(mysql_num_rows($querynum))."_".$filename; } if ($userfile_size > $uploadmaxsize){ $uploadform = $uploadform1.""; }else{ $uploadform = $uploadform1.""; $newsize = $sizeleft - $userfile_size; if ($newsize < 10){ $uploadform = $uploadform1.""; }else{ if ($staffupload == "yes" || ($userfile_type == "image/pjpeg" || $userfile_type == "image/jpeg" || $userfile_type == "image/gif" || $userfile_type == "text/plain" || $userfile_type == "application/pdf")) { $uploadfile = "/home/atsmedia/uploads/".$filename; copy($tempfile, "$uploadfile"); // if(!@copy($userfile, "$directory/$filename")) if(!@copy($tempfile, "$uploadfile")) { $uploadform = $uploadform1.""; }else{ // $theupload = system('rsync -a --protocol=29 /home/abovetopsecret/uploads/files/ 74.52.37.210:/home/abovetopsecret/uploads', $retval); $uploadform = $uploadform1.""; $query = mysql_query("INSERT INTO xmb_uploads VALUES('$dbuser','$filename','$userfile_size','live')"); // $theupload = system('rsync -a --protocol=29 /home/abovetopsecret/uploads/files/ atsmedia@ftp.cachefly.com:/web/uploads/', $retval); } }else{ $uploadform = $uploadform1.""; } } } }else{ $uploadform = $uploadform1; } $uploadform_max = ""; $query = mysql_query("SELECT * FROM xmb_uploads WHERE username = '$dbuser' and status = 'live'"); if(mysql_num_rows($query) == 0){}else { $files = ""; } echo $htmltop; echo $uploadform; echo $files; echo $uploadform_upload; echo $formfooter; echo "

Use The New Media Portal For Uploads

The file, ".$delete." has been removed from your list.

Your file size of ".$userfile_size." bytes is too large, please use a smaller file.

Your file size of ".$userfile_size." will exceed your maximum allowable file space.

Adding that file of ".$userfile_size." bytes to your list of files would exceed your maximum allowable storage space. If you would like to add the file, please delete some of your existing files. (".$newsize." of ".$sizeleft.")

There was an error, your file was not uploaded, please try again.

Your file, ".$filename." at a size of ".$userfile_size." bytes has been uploaded to the uploads directory. Make note of the full path to your file: "; $uploadform = $uploadform."

Your file, ".$filename.", of ".$userfile_type." is not supported, please try a different file.

You have ".$sizeleft." bytes of storage space remaining.

"; $query = mysql_query("SELECT * FROM xmb_uploads WHERE username = '$dbuser' and status = 'live'"); while($loop = mysql_fetch_array($query)){ $files = $files.""; } $newsizeleft = $maxsize; $query = mysql_query("SELECT * FROM xmb_uploads WHERE username = '$dbuser' and status = 'live'"); while($thesize = mysql_fetch_array($query)){$newsizeleft = $newsizeleft - $thesize[thefilesize];} $newsizeleft = round($newsizeleft/1024); $files = $files.""; $files = $files." ATS File Browser filename file size delete ".$loop['thefile']." ".$loop['thefilesize']." delete Space remaining ".$newsizeleft." k

"; echo $htmlbottom; ?>