#// PROCESS UPLOADED FILE
if($_POST["uploadpicture"] == $MSG_681) {
if(!empty($HTTP_POST_FILES["userfile"]["tmp_name"]) && $HTTP_POST_FILES["userfile"]["tmp_name"] != "none")
{
if($HTTP_POST_FILES["userfile"]["size"] > ($SETTINGS["maxpicturesize"] * 1024)) {
$ERR = $ERR_709." ".$SETTINGS["maxpicturesize"]." Kbytes";
} elseif(!strpos($HTTP_POST_FILES["userfile"]["type"],"gif") &&
!strpos($HTTP_POST_FILES["userfile"]["type"],"png") &&
!strpos($HTTP_POST_FILES["userfile"]["type"],"jpeg")) {
$ERR = $ERR_710."(".$HTTP_POST_FILES["userfile"]["type"].")";
} else {
#// Create a TMP directory for this session (if not already created)
umask();
if(!file_exists($image_upload_path.session_id())) {
umask();
mkdir($image_upload_path.session_id(),0777);
}
#// Move uploaded file into TMP directory
move_uploaded_file($HTTP_POST_FILES["userfile"]["tmp_name"],
$image_upload_path.session_id()."/".$HTTP_POST_FILES["userfile"]["name"]);
chmod($image_upload_path.session_id()."/".$HTTP_POST_FILES["userfile"]["name"],0666);
#//Populate arrays
$UPLOADED_PICTURES[] = $HTTP_POST_FILES["userfile"]["name"];
$UPLOADED_PICTURES_SIZE[] = $HTTP_POST_FILES["userfile"]["size"];
$_SESSION["UPLOADED_PICTURES"]=$UPLOADED_PICTURES;
$_SESSION["UPLOADED_PICTURES_SIZE"]=$UPLOADED_PICTURES_SIZE;
}
}
}

[...]


if(is_array($UPLOADED_PICTURES))
{
while(list($k,$v) = each($UPLOADED_PICTURES))
{
?>
<TD WIDTH=55%>
<?=$sml_font?><?=$v?></FONT>
</TD>
<TD WIDTH=35%>
<?=$sml_font?><?=$UPLOADED_PICTURES_SIZE[$k]?></FONT>
</TD>
<TD WIDTH=10% ALIGN=CENTER>
<A HREF="<?=basename($PHP_SELF)?>?action=delete&img=<?=$k?>"><IMG SRC="images/trash.png" BORDER=0></A>
</TD>
</TR>
<?
}
}
?>
[...]