<form class="" id="add_downloadble" method="post" enctype="multipart/form-data" name="upload" >
<div class="control-group">
<label class="control-label" for="inputEmail">File:</label>
<div class="form-group">
<input name="uploaded_file" class="form-control" id="fileInput" type="file" required>
<input type="hidden" name="MAX_FILE_SIZE" value="1000000" />
<input type="hidden" name="id" value="<?php echo $session_id ?>"/>
</div>
</div>
<div class="form-group">
<div class="controls">
<input type="text" name="name" Placeholder="File Name" class="form-control" required>
</div>
</div>
<div class="form-group">
<div class="controls">
<input type="text" name="desc" Placeholder="Description" class="form-control" required>
</div>
</div>
<script>
jQuery(document).ready(function($){
e.preventDefault();
var _this = $(e.target);
var formData = new FormData($(this)[0]);
$.ajax({
type: "POST",
url: "save.php",
data: formData,
success: function(html){
window.location = 'tambah_materi.php';
},
cache: false,
contentType: false,
processData: false
});
});
});
</script>
</div>
<div class="col-sm-6">
<div class="alert alert-info">Centang kelas yang ingin di tambahkan file ini.</div>
<div class="pull-left">
Check All <input type="checkbox" name="selectAll" id="checkAll" />
<script>
$("#checkAll").click(function () {
$('input:checkbox').not(this).prop('checked', this.checked);
});
</script>
</div>
<table cellpadding="0" cellspacing="0" border="0" class="table" id="">
<thead>
<tr>
<th></th>
<th>Nama Kelas</th>
<th>Subject Code</th>
</tr>
</thead>
<tbody>
<?php $query = mysql_query("select * from teacher_class
LEFT JOIN class ON class.class_id = teacher_class.class_id
LEFT JOIN subject ON subject.subject_id = teacher_class.subject_id
where teacher_id = '$session_id' and school_year = '$school_year' ")or die(mysql_error());
$count = mysql_num_rows($query);
while($row = mysql_fetch_array($query)){
$id = $row['teacher_class_id'];
?>
<tr id="del<?php echo $id; ?>">
<td width="30">
<input id="" class="" name="selector[]" type="checkbox" value="<?php echo $id; ?>">
</td>
<td><?php echo $row['class_name']; ?></td>
<td><?php echo $row['subject_code']; ?></td>
</tr>
<?php } ?>
</tbody>
</table>
</div>
<div class="col-sm-12">
<hr>
<center>
<div class="control-group">
<div class="controls">
<button name="Upload" type="submit" value="Upload" class="btn btn-success" /><i class="icon-upload-alt"></i> Upload</button>
</div>
</div>
</center>
</form>
保存.php文件
include('../session.php');
//Include database connection details
include("../dbConnector.php");
$connector = new DbConnector();
$errmsg_arr = array();
//Validation error flag
$errflag = false;
$uploaded_by_query = mysql_query("select * from teacher where teacher_id = '$session_id'")or die(mysql_error());
$uploaded_by_query_row = mysql_fetch_array($uploaded_by_query);
$uploaded_by = $uploaded_by_query_row['firstname']."".$uploaded_by_query_row['lastname'];
/* $id_class=$_POST['id_class']; */
$name=$_POST['name'];
//Function to sanitize values received from the form. Prevents SQL injection
function clean($str) {
$str = @trim($str);
if (get_magic_quotes_gpc()) {
$str = stripslashes($str);
}
return mysql_real_escape_string($str);
}
//Sanitize the POST values
$filedesc = clean($_POST['desc']);
//$subject= clean($_POST['upname']);
if ($filedesc == '') {
$errmsg_arr[] = ' file diskripsi belum di isi';
$errflag = true;
}
if ($_FILES['uploaded_file']['size'] >= 1048576 * 5) {
$errmsg_arr[] = 'file selected exceeds 5MB size limit';
$errflag = true;
}
//If there are input validations, redirect back to the registration form
if ($errflag) {
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
session_write_close();
?>
<script>
window.location = 'downloadable.php<?php echo '?id='.$get_id; ?>';
</script>
<?php exit();
}
//upload random name/number
$rd2 = mt_rand(1000, 9999) . "_File";
//Check that we have a file
if ((!empty($_FILES["uploaded_file"])) && ($_FILES['uploaded_file']['error'] == 0)) {
//Check if the file is JPEG image and it's size is less than 350Kb
$filename = basename($_FILES['uploaded_file']['name']);
$ext = substr($filename, strrpos($filename, '.') + 1);
if (($ext != "exe") && ($_FILES["uploaded_file"]["type"] != "application/x-msdownload")) {
//Determine the path to which we want to save this file
//$newname = dirname(__FILE__).'/upload/'.$filename;
$newname = "../admin/uploads/" . $rd2 . "_" . $filename;
$name_notification = 'Add Downloadable Materials file name'." ".'<b>'.$name.'</b>';
//Check if the file with the same name is already exists on the server
if (!file_exists($newname)) {
//Attempt to move the uploaded file to it's new place
if ((move_uploaded_file($_FILES['uploaded_file']['tmp_name'], $newname))) {
//successful upload
// echo "It's done! The file has been saved as: ".$newname;
$id=$_POST['selector'];
$N = count($id);
for($i=0; $i < $N; $i++)
{
/* $qry2 = "INSERT INTO files (fdesc,floc,fdatein,teacher_id,class_id,fname,uploaded_by) VALUES ('$filedesc','$newname',NOW(),'$session_id','$id[$i]','$name','$uploaded_by')"; */
mysql_query("INSERT INTO files (fdesc,floc,fdatein,teacher_id,class_id,fname,uploaded_by) VALUES ('$filedesc','$newname',NOW(),'$session_id','$id[$i]','$name','$uploaded_by')");
mysql_query("insert into notification (teacher_class_id,notification,date_of_notification,link) value('$id[$i]','$name_notification',NOW(),'downloadable_student.php')")or die(mysql_error());
}
}
}
}
}
/* mysql_close(); */
?>