<?php
ob_start();
include('../includes/connection/func.inc.php');
if(isset($_FILES["coursevideo"]) && $_FILES["coursevideo"]["error"]== UPLOAD_ERR_OK)
{
if (!isset($_SERVER['HTTP_X_REQUESTED_WITH'])){
die("No Direct Access Are allowed");
}
switch(strtolower($_FILES['coursevideo']['type']))
{
case 'video/mp4':
case 'video/MP4':
case 'video/x-flv':
break;
default:
die('Unsupported Video File!'); //output error
}
$name = $_POST['name'];
$es = md5(date('Y-m-d H:i:s'));
$course_id=$_POST['course_id'];
$videoname = $_FILES['coursevideo']['name'];
$videotemp = $_FILES['coursevideo']['tmp_name'];
$fullname = $es.$videoname;
$dir ='../combine/coursevideos/';
if(move_uploaded_file($videotemp,$dir.$fullname))
{
$query = "insert into coursevideo values ('','$course_id','$name','$fullname')";
$result = mysql_query($query) or die(mysql_error());
die();
}
}
else
{
echo "Some Errors";
}
?> |