index_parentPhotoUploadProcess.php

<?php
/*
Gibbon, Flexible & Open School System
Copyright (C) 2010, Ross Parker

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/

//Gibbon system-wide includes
include './gibbon.php';

$gibbonPersonID = $_GET['gibbonPersonID'];
$URL = $gibbon->session->get('absoluteURL').'/index.php';

//Proceed!
//Check if planner specified
if ($gibbonPersonID == '' or $gibbonPersonID != $gibbon->session->get('gibbonPersonID') or $_FILES['file1']['tmp_name'] == '') {
    $URL .= '?return=error1';
    header("Location: {$URL}");
    exit();
} else {
    try {
        $data = array('gibbonPersonID' => $gibbonPersonID);
        $sql = 'SELECT * FROM gibbonPerson WHERE gibbonPersonID=:gibbonPersonID';
        $result = $connection2->prepare($sql);
        $result->execute($data);
    } catch (PDOException $e) {
        $URL .= '?return=error2';
        header("Location: {$URL}");
        exit();
    }

    if ($result->rowCount() != 1) {
        $URL .= '?return=error2';
        header("Location: {$URL}");
        exit();
    } else {
        $attachment1 = null;
        if (!empty($_FILES['file1']['tmp_name'])) {
            $fileUploader = new Gibbon\FileUploader($pdo, $gibbon->session);
            $fileUploader->setFileSuffixType(Gibbon\FileUploader::FILE_SUFFIX_INCREMENTAL);

            $file = $_FILES['file1'] ?? null;

            // Upload the file, return the /uploads relative path
            $attachment1 = $fileUploader->uploadFromPost($file, $gibbon->session->get('username').'_240');

            if (empty($attachment1)) {
                $URL .= '?return=warning1';
                header("Location: {$URL}");
                exit();
            }
        }
        
        $path = $gibbon->session->get('absolutePath');

        //Check for reasonable image
        $size = getimagesize($path.'/'.$attachment1);
        $width = $size[0];
        $height = $size[1];
        if ($width < 240 or $height < 320) {
            $URL .= '?return=error6';
            header("Location: {$URL}");
            exit();
        } elseif ($width > 480 or $height > 640) {
            $URL .= '?return=error6';
            header("Location: {$URL}");
            exit();
        } elseif (($width / $height) < 0.60 or ($width / $height) > 0.8) {
            $URL .= '?return=error6';
            header("Location: {$URL}");
            exit();
        } else {
            //UPDATE
            try {
                $data = array('gibbonPersonID' => $gibbonPersonID, 'attachment1' => $attachment1);
                $sql = 'UPDATE gibbonPerson SET image_240=:attachment1 WHERE gibbonPersonID=:gibbonPersonID';
                $result = $connection2->prepare($sql);
                $result->execute($data);
            } catch (PDOException $e) {
                $URL .= '?return=error2';
                header("Location: {$URL}");
                exit();
            }

            //Update session variables
            $gibbon->session->set('image_240', $attachment1);

            //Clear cusotm sidebar
            unset($_SESSION[$guid]['index_customSidebar.php']);

            $URL .= '?return=success0';
            header("Location: {$URL}");
        }
    }
}