0xn0l

📂 /home/brightbrai/public_html/conceptschoolsanghar

✎ EDIT: upload_staff_photo.php ← BACK

<?php
header('Content-Type: application/json');
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type');

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    exit;
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['success' => false, 'message' => 'Invalid request']);
    exit;
}

if (!isset($_FILES['photo']) || $_FILES['photo']['error'] !== UPLOAD_ERR_OK) {
    echo json_encode(['success' => false, 'message' => 'File upload error']);
    exit;
}

$file = $_FILES['photo'];
$maxSize = 100 * 1024; // 100KB
$allowedTypes = ['image/jpeg', 'image/png'];

if ($file['size'] > $maxSize) {
    echo json_encode(['success' => false, 'message' => 'File too large. Max 100KB allowed.']);
    exit;
}

$finfo = finfo_open(FILEINFO_MIME_TYPE);
$mimeType = finfo_file($finfo, $file['tmp_name']);
finfo_close($finfo);

if (!in_array($mimeType, $allowedTypes)) {
    echo json_encode(['success' => false, 'message' => 'Invalid file type. Only JPG and PNG allowed.']);
    exit;
}

$id = preg_replace('/[^a-zA-Z0-9_-]/', '', $_POST['id']);
$extension = ($mimeType === 'image/png') ? 'png' : 'jpg';
$fileName = $id . '_' . uniqid() . '.' . $extension;
$targetDir = "uploads/staff/";

if (!file_exists($targetDir)) {
    mkdir($targetDir, 0755, true);
}

$targetFilePath = $targetDir . $fileName;

if (move_uploaded_file($file['tmp_name'], $targetFilePath)) {
    echo json_encode(['success' => true, 'url' => 'https://brightbrains.pk/school/api/' . $targetFilePath]);
} else {
    echo json_encode(['success' => false, 'message' => 'Failed to save file.']);
}
?>

0xn0l - 0011000001111000011011100011000001101100