Subversion Repositories svnkaklik

<?php

/*************************

  Coppermine Photo Gallery

  ************************

  Copyright (c) 2003-2005 Coppermine Dev Team

  v1.1 originaly written by Gregory DEMAR

  This program is free software; you can redistribute it and/or modify

  it under the terms of the GNU General Public License as published by

  the Free Software Foundation; either version 2 of the License, or

  (at your option) any later version.

  ********************************************

  Coppermine version: 1.3.3

  $Source: /cvsroot/coppermine/stable/upload.php,v $

  $Revision: 1.14 $

  $Author: gaugau $

  $Date: 2005/04/19 03:17:11 $

**********************************************/

// Confirm we are in Coppermine and set the language blocks.

define('IN_COPPERMINE', true);

define('UPLOAD_PHP', true);

define('DB_INPUT_PHP', true);

define('CONFIG_PHP', true);

// Call basic functions, etc.

require('include/init.inc.php');

require('include/picmgmt.inc.php');

// Some placeholders.

$customize = CUSTOMIZE_UPLOAD_FORM;

$user_form = USER_UPLOAD_FORM;

$allowed_URI_boxes = NUM_URI_BOXES;

$allowed_file_boxes = NUM_FILE_BOXES;

// Check to see if user can upload pictures.  Quit with an error if he cannot.

if (!USER_CAN_UPLOAD_PICTURES) {

    cpg_die(ERROR, $lang_errors['perm_denied'], __FILE__, __LINE__);

}

// Globalize $CONFIG.

global $CONFIG, $lang_upload_php, $user_form, $max_file_size;

//___________________________________Function Block_______________________________________

// The form label creation function. Takes a non-array element form $data as its argument.

function form_label($text) {

    echo <<<EOT

        <tr>

                <td class="tableh2" colspan="2">

                        <b>$text</b>

                </td>

        </tr>

EOT;

}

// The form statement creation function. Takes a non-array element form $data as its argument.

function form_statement($text) {

    echo <<<EOT

        <tr>

                <td class="tableb" colspan="2">

                        $text

                </td>

        </tr>

EOT;

}

// The hidden form input function. Takes the hidden input field name and value.

function hidden_input($name, $value) {

        echo "        <input type=\"hidden\" name=\"$name\" value=\"$value\">\n";

}

// The text box form input function. Takes the text label for the box, the input name, the maximum length for text boxes,

// and the number of iterations.

function text_box_input($text, $name, $max_length, $iterations) {

    global $CONFIG;

    $ordinal = '';

    if (($text == '') and ($iterations == '')) {

        echo "        <input type=\"hidden\" name=\"$name\" value=\"\">\n";

        return;

    }

    // Begin loop

    for ($counter=0; $counter<$iterations; $counter++) {

    // Create a numbering system when necessary.

    if ($text == '') {

        $cardinal = $counter + 1;

        $ordinal = "".$cardinal.". ";

    }

    // Create a text box.

    echo <<<EOT

        <tr>

            <td width="40%" class="tableb">

                        $text  $ordinal

        </td>

        <td width="60%" class="tableb" valign="top">

                <input type="text" style="width: 100%" name="$name" maxlength="$max_length" value="" class="textinput">

                </td>

        </tr>

EOT;

    }

}

// The file input function. Takes the label, field name, and number of iterations as arguments.

function file_input($text, $name, $iterations) {

    $ordinal = '';

    // Begin loop

    for ($counter=0; $counter<$iterations; $counter++) {

    // Create a numbering system when necessary.

    if ($text == '') {

        $cardinal = $counter + 1;

        $ordinal = "".$cardinal.". ";

    }

    // Create the file input box.

    echo <<<EOT

        <tr>

            <td class="tableb">

                        $text  $ordinal

        </td>

        <td class="tableb" valign="top">

                        <input type="file" name="$name" size="40" class="listbox">

                </td>

        </tr>

EOT;

    }

}

// The function for text areas on forms. Takes the label, field name, and maximum length as arguments.

function text_area_input($text, $name, $max_length) {

    // Create the text area.

    echo <<<EOT

        <tr>

                <td class="tableb" valign="top">

                        $text

                </td>

                <td class="tableb" valign="top">

                        <textarea name="$name" rows="5" cols="40" wrap="virtual"  class="textinput" style="width: 100%;" onKeyDown="textCounter(this, $max_length);" onKeyUp="textCounter(this, $max_length);"></textarea>

                </td>

        </tr>

EOT;

}

// The function to create the album list drop down.

function form_alb_list_box($text, $name) {

//Vodovnik.com modified this code to allow display of Categories besides album names

    // Pull the $CONFIG array and the GET array into the function.

    global $CONFIG, $HTTP_GET_VARS;

    // Also pull the album lists into the function.

    global $user_albums_list, $public_albums_list;

    // Check to see if an album has been preselected by URL addition. If so, make $sel_album the album number. Otherwise, make $sel_album 0.

    $sel_album = isset($HTTP_GET_VARS['album']) ? $HTTP_GET_VARS['album'] : 0;

    // Create the opening of the drop down box.

    echo <<<EOT

    <tr>

        <td class="tableb">

            $text

        </td>

        <td class="tableb" valign="top">

            <select name="$name" class="listbox">

EOT;

    //Cylce through the User albums.

    foreach($user_albums_list as $album) {

        // Set $album_id to the actual album ID.

        $album_id = $album['aid'];

        //Query the database to determine the category the album belongs to.

        $vQuery = "SELECT category FROM " . $CONFIG['TABLE_ALBUMS'] . " WHERE aid='" . $album_id . "'";

        $vRes = db_query($vQuery);

        $vRes = mysql_fetch_array($vRes);

        // Query the database to get the category name.

        $vQuery = "SELECT name FROM " . $CONFIG['TABLE_CATEGORIES'] . " WHERE cid='" . $vRes['category'] . "'";

        $vRes = db_query($vQuery);

        $vRes = mysql_fetch_array($vRes);

        // Create the option for the drop down list.

        echo '                <option value="' . $album['aid'] . '"' . ($album['aid'] == $sel_album ? ' selected' : '') . '>' . (($vRes['name']) ? '(' . $vRes['name'] . ') ' : '') . $album['title'] . "</option>\n";

    }

    //Cycle through the public albums.

    foreach($public_albums_list as $album) {

        // Set $album_id to the actual album ID.

        $album_id = $album['aid'];

        //Query the database to determine the category the album belongs to.

        $vQuery = "SELECT category FROM " . $CONFIG['TABLE_ALBUMS'] . " WHERE aid='" . $album_id . "'";

        $vRes = db_query($vQuery);

        $vRes = mysql_fetch_array($vRes);

        // Query the database to get the category name.

        $vQuery = "SELECT name FROM " . $CONFIG['TABLE_CATEGORIES'] . " WHERE cid='" . $vRes['category'] . "'";

        $vRes = db_query($vQuery);

        $vRes = mysql_fetch_array($vRes);

        // Create the option for the drop down list.

        echo '                <option value="' . $album['aid'] . '"' . ($album['aid'] == $sel_album ? ' selected' : '') . '>' . (($vRes['name']) ? '(' . $vRes['name'] . ') ' : '') . $album['title'] . "</option>\n";

    }

    // Close the drop down.

    echo <<<EOT

            </select>

        </td>

    </tr>

EOT;

}

// The create form function. Takes the $data array as its object.

//

// Type:

// 0 => text box input

// 1 => file input

// 2 => album list

// 3 => text area input

// 4 => hidden input

function create_form(&$data) {

    global $CONFIG;

    // Cycle through the elements in the data array.

    foreach($data as $element) {

        // If the element is another array, parse the definition contained within the array.

        if ((is_array($element))) {

            // Based on the type declared in the data array's third position, create a different form input.

            switch ($element[2]) {

                // If the type is a text box input

                case 0 :

                    //Call the form input function.

                    text_box_input($element[0], $element[1], $element[3], $element[4]);

                    break;

                // If the type is a file input.

                case 1 :

                    // Call the file input function.

                    file_input($element[0], $element[1], $element[3]);

                    break;

                // If the type is an album list dropdown.

                case 2 :

                    // Call the album list function.

                    form_alb_list_box($element[0], $element[1]);

                    break;

                // If the type is a text area

                case 3 :

                    // Call the text area function.

                    text_area_input($element[0], $element[1], $element[3]);

                    break;

                // If the type is a hidden form

                case 4 :

                    // Call the hidden input funtion.

                    hidden_input($element[0], $element[1]);

                    break;

                // If the type is not present, kill the script.

                default:

                    cpg_die(ERROR, $lang_upload_php['reg_instr_1'], __FILE__, __LINE__);

            } // switch

        } else {

            // If the element is not an array, it is a label, so call the label function.

            form_label($element);

        }

    }

}

// The open_form function creates the Javascript verification code and the opening form tags.

// $path hold the form action path.

function open_form($path) {

    echo <<<EOT

    <script language="JavaScript">

    function textCounter(field, maxlimit) {

            if (field.value.length > maxlimit) // if too long...trim it!

            field.value = field.value.substring(0, maxlimit);

    }

    </script>

    <form method="post" action="$path" ENCTYPE="multipart/form-data">

    </td>

EOT;

}

// The close form function creates the submit button and the closing tags.

function close_form($button_value) {

// Pull the language array into the function.

global $lang_upload_php;

// Create the submit button and close the form.

echo <<<EOT

        <tr>

                <td colspan="2" align="center" class="tablef">

                        <input type="submit" value="{$button_value}" class="button">

                </td>

                </form>

        </tr>

EOT;

}

function form_instructions() {

    global $CONFIG, $lang_upload_php, $user_form, $max_file_size;

    echo "<tr><td colspan=\"2\">";

    printf ($lang_upload_php['reg_instr_2'], $CONFIG['max_upl_size']);

    if ($user_form > '3') {

        echo "<br /><br />{$lang_upload_php['reg_instr_3']}";

    }

    if (($user_form == '2') or ($user_form == '3') or ($user_form == '5') or ($user_form == '6')) {

        echo "<br /><br />{$lang_upload_php['reg_instr_4']}";

    }

    echo "<br /><br />{$lang_upload_php['reg_instr_5']}";

    echo "</td></tr>";

}

// The get_and_convert_to_bytes function retrieves a limitng value from php.ini and converts the shorthand to bytes.

function get_and_convert_to_bytes ($ini_variable_name) {

    // Get the variable from php.ini

    $ini_string = ini_get($ini_variable_name);

    // Declare an array to store regex matches in.

    $parsed_ini_size = array();

    // Make sure the returned value is a string, then split the number and the unit in two.

    if ((is_string($ini_string)) and (eregi('^([[:digit:]])+([[:alpha:]])*$', $ini_string, $parsed_ini_size))) {

        // Store the numerical component in $ini_limit cast as an integer

        $ini_limit = (int) $parsed_ini_size[1];

        // Convert the unit to lower case for analysis and store in $ini_limit_unit.

        $ini_limit_unit = strtolower($parsed_ini_size[2]);

        // Check the unit to see if any conversion is necessary.

        if ($ini_limit_unit == 'm') {

             // The units indicate megabytes. Shift to bytes.

             $ini_limit = $ini_limit << 20;

        } elseif ($ini_limit_unit == 'k') {

             // The units indicate kilobytes. Shift to bytes.

             $ini_limit = $ini_limit << 10;

        }

        // Return the modified value from php.ini

        return $ini_limit;

    } else {

        // The returned value is not a string or no pattern match was found. Return false.

        return false;

    }

}

// The function spring_cleaning is a garbage collection routine used to purge a directory of old files.

function& spring_cleaning($directory_path, $cache_time = 86400, $exclusion_list = array('index.html')) {

    //Storage the deleted files

    $deleted_list = array();

    //First we get the transitory directory handle.

    $directory_handle = opendir($directory_path);

    // Exit if the directory cannot be opened.

    if(!$directory_handle) {

        // Return.

        return;

    }

    // Now let's read through the directory contents.

    while (!(($file = readdir($directory_handle)) === false)) {

            // Avoid deleting the index page of the directory.

            if (in_array($file,$exclusion_list)) {

                // This is the index file, so we move on.

                continue;

            }

            $dir_path = $directory_path."/".$file;

            if (is_dir($dir_path)) {

                // This is a directory, so we move on.

                continue;

            }

            // We find out when the file was last accessed.

            $access_time = filemtime($dir_path); // fileatime() returned incorrect value on Windows

            // We find out the current time.

            $current_time = time();

            // We calculate the the delete time. We will delete anything older than $cache_time.

            $delete_time = $current_time - $access_time;

            // Now we compare the two.

            if ($delete_time >= $cache_time) {

                    // The file is old. We delete it.

                    $deleted_list[] = $dir_path; // Store the name of the file getting deleted

                    unlink($dir_path);

            }

    }

    // Don't forget to close the directory.

    closedir($directory_handle);

    return $deleted_list;

}

// The create_record function. Takes the encoded string. Returns the unique record ID.

function create_record($encoded_string) {

    // Globalize $CONFIG

    global $CONFIG;

    // Declare and initialize variables.

    $unique_ID_array = array();

    $generic_array = array();

    // Get all IDs from the table.

    $result = db_query("SELECT unique_ID FROM {$CONFIG['TABLE_TEMPDATA']}");

    // Create unique ID array.

    if (mysql_num_rows($result)) {

        // Move all values into $unique_ID_array.

        while ($generic_array = mysql_fetch_array($result)) {

            // Store the values.

            $unique_ID_array[] = $generic_array['unique_ID'];

        }

    } else {

        // The table may be empty. Give it a value.

        $unique_ID_array[] = 0;

    }

    // Free resources.

    mysql_free_result($result);

    // Generate the unique ID. Keep generating new IDs until one that is not in use is found.

    do {

        // Create a random string by taking the first 8 characters of an MD5 hash of a concatenation of the current UNIX epoch time and the current server process ID.

        $unique_ID = substr(md5(microtime().getmypid()), 0, 8);

    } while (in_array($unique_ID, $unique_ID_array));

    // Create a timestamp to track the record.

    $timestamp = time();

    // Insert the new record.

    $result = db_query("INSERT INTO {$CONFIG['TABLE_TEMPDATA']} VALUES ('$unique_ID', '$encoded_string', '$timestamp')");

    // Return the unique ID if insertion was successful. Otherwise, return false.

    if ($result) {

        return $unique_ID;

    } else {

        return FALSE;

    }

}

// The update_record function. Takes the $unique_ID and $encoded_string.

function update_record($unique_ID, $encoded_string) {

    // Globalize $CONFIG

    global $CONFIG;

    // Update record.

    $result = db_query("UPDATE {$CONFIG['TABLE_TEMPDATA']} SET encoded_string = '$encoded_string' WHERE unique_ID = '$unique_ID'");

    // Return true if successful.

    if ($result) {

        return TRUE;

    } else {

        return FALSE;

    }

}

// The delete_record function. Takes the $unique_ID.

function delete_record($unique_ID) {

    // Globalize $CONFIG

    global $CONFIG;

    // Delete record.

    $result = db_query("DELETE FROM {$CONFIG['TABLE_TEMPDATA']} WHERE unique_ID = '$unique_ID'");

    // Return true if successful.

    if ($result) {

        return TRUE;

    } else {

        return FALSE;

    }

}

// The retrieve_record function. Takes the $unique_ID.

function retrieve_record($unique_ID) {

    // Globalize $CONFIG

    global $CONFIG;

    // Retrieve record.

    $result = db_query("SELECT encoded_string FROM {$CONFIG['TABLE_TEMPDATA']} WHERE unique_ID = '$unique_ID'");

    // Return string if successful.

    if (mysql_num_rows($result)) {

        // Move value into $encoded_string.

        while ($generic_array = mysql_fetch_array($result)) {

            // Store the value.

            $encoded_string = $generic_array['encoded_string'];

        }

        // Free resources.

        mysql_free_result($result);

        return $encoded_string;

    } else {

        // Free resources.

        mysql_free_result($result);

        return FALSE;

    }

}

// The clean_table function.

function clean_table() {

    // Globalize $CONFIG

    global $CONFIG;

    // Create a timestamp from an hour ago.

    $comparative_timestamp = time() - 3600;

    // Delete record.

    $result = db_query("DELETE FROM {$CONFIG['TABLE_TEMPDATA']} WHERE timestamp < $comparative_timestamp");

    // Return true if successful.

    if ($result) {

        return TRUE;

    } else {

        return FALSE;

    }

}

//The function check_status determines the status of a URI resource.

//It takes the URI as its argument and serves to give more specific error

//messages about unavailable resources.

function check_status($URI) {

    // Parse the URI into it's requisite parts.

    $parts = @parse_url($URI);

    // If there is no detectable host, return FALSE.

    if (empty($parts["host"])) {

        return FALSE;

    } else {

        $host = $parts["host"];

    }

    // If a path is detected, make it $path. Otherwise, assume it is a directory.

    if (!empty($parts["path"])) {

        $path = $parts["path"];

    } else {

        $path = "/";

    }

    // Append any queries that might be attached.

    if (!empty($parts["query"])) {

        $path .= "?" . $parts["query"];

    }

    // Set the port if supplied. Default to port 80.

    if (!empty($parts["port"])) {

        $port = $parts["port"];

    } else {

        $port = "80";

    }

    // Attempt to open a socket to the host.

    $socket = @fsockopen( $host, $port, $errno, $errstr, 30 );

    // Verify that the socket opened.  Return false if it fails.

    if (!$socket) {

        return FALSE;

    } else {

        // Craft HTTP request.

        $request = "HEAD $path HTTP/1.0\r\nUser-Agent: PHP/".phpversion()."\r\nHost: $host\r\nAccept: */*\r\n\r\n";

        // Get request length.

        $length = strlen($request);

        // Send request data to host. Return false if there is an error.

        if(!(fwrite($socket, $request, $length))) {

            return FALSE;

        }

        // Collect the host's response.

        $response = fgets($socket, 22);

        // Close the socket.

        fclose($socket);

        // Return the response.

        return $response;

    }

}

//################################# MAIN CODE BLOCK ##################################################

// Check to see if user customizations are allowed and if one the request has been made yet.

if ((CUSTOMIZE_UPLOAD_FORM) and (!isset($_REQUEST['file_upload_request'])) and (!isset($_REQUEST['URI_upload_request'])) and (!isset($_POST['control']))) {

    // Check to see if the form type is configurable.  If it is, produce the configuration form. Otherwise, generate a warning.

    if(!(USER_UPLOAD_FORM == 0) and !(USER_UPLOAD_FORM == 7)) {

        // Create the box request page.

        pageheader($lang_upload_php['custom_title']);

        starttable("100%", $lang_upload_php['custom_title'], 2);

        echo "<tr><td colspan=\"2\">";

        echo "{$lang_upload_php['cust_instr_1']}<br /><br />";

        $data = array();

        $data[] = $lang_upload_php['cust_instr_2'];

        // If the file upload type is only file uploads or is a dual mode, ask for the requisite number of file upload boxes.

        if ((USER_UPLOAD_FORM == '1') or (USER_UPLOAD_FORM == '3') or (USER_UPLOAD_FORM == '4') or (USER_UPLOAD_FORM == '6')) {

            // Add the file upload array element to the form array.

            $data[] = array($lang_upload_php['cust_instr_6'],'file_upload_request', '0', '4', '1');

            // Print number of allowed file upload boxes.

            printf ($lang_upload_php['cust_instr_3'], $allowed_file_boxes);

            echo "<br /><br />";

        }

        // If the file upload type is only URI uploads or is a dual mode, ask for the requisite number of URI upload boxes.

        if ((USER_UPLOAD_FORM == '2') or (USER_UPLOAD_FORM == '3') or (USER_UPLOAD_FORM == '5') or (USER_UPLOAD_FORM == '6')) {

            // Add the URI upload array element to the form array.

            $data[] = array($lang_upload_php['cust_instr_5'], 'URI_upload_request', '0', '4', '1');

            // Print number of allowed URI upload boxes.

            printf ($lang_upload_php['cust_instr_4'], $allowed_URI_boxes);

            echo "<br /><br />";

        }

        echo "{$lang_upload_php['cust_instr_7']}<br /><br />";

        echo "</td></tr>";

        open_form($_SERVER['PHP_SELF']);

        create_form($data);

        close_form($lang_continue);

        endtable();

        pagefooter();

        // Exit the script.

        exit;

    } else {

        //Use the default settings for the number of boxes.

        $num_URI_boxes = NUM_URI_BOXES;

        $num_file_boxes = NUM_FILE_BOXES;

    }

} elseif (CUSTOMIZE_UPLOAD_FORM) {

// If the user is allowed to customize the form, check the incoming data for the number of requested boxes.

    //Check for the number of file upload boxes.

    if (isset($_REQUEST['file_upload_request'])) {

        // Do some validation.

        $filtered_request = max(0, intval($_REQUEST['file_upload_request']));

        if ($filtered_request > NUM_FILE_BOXES) {

            $num_file_boxes = NUM_FILE_BOXES;

        } else {

            $num_file_boxes = $filtered_request;

        }

    }

    //Check for the number of requested URI upload boxes.

    if (isset($_REQUEST['URI_upload_request'])) {

        // Do some validation.

        $filtered_request = max(0, intval($_REQUEST['URI_upload_request']));

        if ($filtered_request > NUM_URI_BOXES) {

            $num_URI_boxes = NUM_URI_BOXES;

        } else {

            $num_URI_boxes = $filtered_request;

        }

    }

} else {

    //Use the default settings for the number of boxes.

    $num_URI_boxes = NUM_URI_BOXES;

    $num_file_boxes = NUM_FILE_BOXES;

}

// Get public and private albums, and set maximum individual file size.

if (GALLERY_ADMIN_MODE) {

    $public_albums = db_query("SELECT aid, title FROM {$CONFIG['TABLE_ALBUMS']} WHERE category < " . FIRST_USER_CAT . " ORDER BY title");

} else {

    $public_albums = db_query("SELECT aid, title FROM {$CONFIG['TABLE_ALBUMS']} WHERE category < " . FIRST_USER_CAT . " AND uploads='YES' ORDER BY title");

}

if (mysql_num_rows($public_albums)) {

    $public_albums_list = db_fetch_rowset($public_albums);

} else {

    $public_albums_list = array();

}

if (USER_ID) {

    $user_albums = db_query("SELECT aid, title FROM {$CONFIG['TABLE_ALBUMS']} WHERE category='" . (FIRST_USER_CAT + USER_ID) . "' ORDER BY title");

    if (mysql_num_rows($user_albums)) {

        $user_albums_list = db_fetch_rowset($user_albums);

    } else {

        $user_albums_list = array();

    }

} else {

    $user_albums_list = array();

}

if (!count($public_albums_list) && !count($user_albums_list)) {

    cpg_die (ERROR, $lang_upload_php['err_no_alb_uploadables'], __FILE__, __LINE__);

}

// Assign maximum file size for browser crontrols.

$max_file_size = $CONFIG['max_upl_size'] << 10;

// Create the upload forms using the upload congfiguration.

if (!isset($_REQUEST['control'])) {

    // Do some cleanup in the edit directory.

    spring_cleaning("./{$CONFIG['fullpath']}edit",3600);

    // Do some cleaning in the temp data table.

    clean_table();

    // Create upload form headers.

    pageheader($lang_upload_php['title']);

    // Open the form table.

    starttable("100%", $lang_upload_php['title'], 2);

    // Select the form action.

    if (USER_UPLOAD_FORM == '0') {

        // The user has the single upload only form. Send the request to db_input.php.

        open_form('db_input.php');

    } else {

        // Direct the request to this script and print the form instructions.

        open_form($_SERVER['PHP_SELF']);

        form_instructions();

    }

    // Use a if-then-else construct to create the upload form for the user based on the setting in the

    // groups panel.

    if(USER_UPLOAD_FORM == '0') {

        // The user should have the 'single upload only' form.

        // Declare an array containing the various upload form box definitions.

        $captionLabel = $lang_upload_php['description'];

        if ($CONFIG['show_bbcode_help']) {$captionLabel .= '<hr />'.$lang_bbcode_help;}

        $form_array = array(

        sprintf($lang_upload_php['max_fsize'], $CONFIG['max_upl_size']),

        array($lang_upload_php['album'], 'album', 2),

        array('MAX_FILE_SIZE', $max_file_size, 4),

        array($lang_upload_php['picture'], 'userpicture', 1, 1),

        array($lang_upload_php['pic_title'], 'title', 0, 255, 1),

        array($captionLabel, 'caption', 3, $CONFIG['max_img_desc_length']),

        array($lang_upload_php['keywords'], 'keywords', 0, 255, 1),

        array('event', 'picture', 4)

        );

        if(!empty($CONFIG['user_field1_name'])) {

            $form_array[] = array($CONFIG['user_field1_name'], 'user1', 0, 255, 1);

        }

        if(!empty($CONFIG['user_field2_name'])) {

            $form_array[] = array($CONFIG['user_field2_name'], 'user2', 0, 255, 1);

        }

        if(!empty($CONFIG['user_field3_name'])) {

            $form_array[] = array($CONFIG['user_field3_name'], 'user3', 0, 255, 1);

        }

        if(!empty($CONFIG['user_field4_name'])) {

            $form_array[] = array($CONFIG['user_field4_name'], 'user4', 0, 255, 1);

        }

    } else {

        // Check for valid form number.

        if ((USER_UPLOAD_FORM >= '0') and (USER_UPLOAD_FORM <= '7')) {

            // Create form array, and insert MAX_FILE_SIZE control.

            $form_array[] = array('MAX_FILE_SIZE', $max_file_size);

            // Add each upload type depending on the form number,

            if((USER_UPLOAD_FORM == '1') or (USER_UPLOAD_FORM == '3') or (USER_UPLOAD_FORM == '4') or (USER_UPLOAD_FORM == '6')) {

                if($num_file_boxes > 0) {

                    $form_array[] = $lang_upload_php['reg_instr_7'];

                    $form_array[] = array('', 'file_upload_array[]', 1, $num_file_boxes);

                }

            }

            if((USER_UPLOAD_FORM == '2') or (USER_UPLOAD_FORM == '3') or (USER_UPLOAD_FORM == '5') or (USER_UPLOAD_FORM == '6')) {

                if($num_URI_boxes > 0) {

                    $form_array[] = $lang_upload_php['reg_instr_8'];

                    $form_array[] = array('', 'URI_array[]', 0, 256, $num_URI_boxes);

                }

            }

            if((USER_UPLOAD_FORM == '4') or (USER_UPLOAD_FORM == '5') or (USER_UPLOAD_FORM == '6') or (USER_UPLOAD_FORM == '7')) {

                $form_array[] = $lang_upload_php['reg_instr_6'];

                $form_array[] = array('', 'ZIP_array[]', 1, 1);

            }

            // Add the control device.

            $form_array[] = array('control', 'phase_1', 4);

        } else {

            // Unknown form number.

            cpg_die(ERROR, $lang_upload_php['reg_instr_1'], __FILE__, __LINE__);

        }

    }

    // Create the form.

    create_form($form_array);

    // Close the form.

    if (USER_UPLOAD_FORM == '0') {

        // The user has the single upload only form. Select proper language for button.

        close_form($lang_upload_php['title']);

    } else {

        // Make button say 'Continue.'

        close_form($lang_continue);

    }

    // Close the table, create footers, and flush the output buffer.

    endtable();

    pagefooter();

    ob_end_flush();

    // Exit the script.

    exit;

}

// Recieve incoming file uploads for phase I.

if ((isset($_POST['control'])) and ($_POST['control'] == 'phase_1')) {

    // $_FILES['file_upload_array']['name'][$counter]

    // $_FILES['file_upload_array']['size'][$counter]

    // $_FILES['file_upload_array']['tmp_name'][$counter]

    // $_FILES['file_upload_array']['type'][$counter]

    // $_FILES['file_upload_array']['error'][$counter]

    //

    // Error values:

    // 0 - No error

    // 1 - Exceeded filesize allowed in php.ini

    // 2 - Exceeded filesize allowed by HTML MAX_FILE_SIZE

    // 3 - Only a partial upload

    // 4 - No upload occurred.

    $file_upload_count = count($_FILES['file_upload_array']['name']);

    if ($file_upload_count > 0) {

        // Check for error code support. Set the error code.

        if (count($_FILES['file_upload_array']['error']) == 0) {

            // This version of PHP does not support error codes (PHP < 4.2.0).  Create our own error code.

            $error_code = 'default';

        } else {

            // We have error support.

            $error_support = 'TRUE';