PHP attach_upload函数代码示例

 function format_value()
 {
     if (isset($_FILES[$this->name])) {
         require_once PLUGIN_DIR . 'attach.inc.php';
         $base = $this->form->base;
         $result = attach_upload($_FILES[$this->name], $base);
         if (isset($result['result']) && $result['result']) {
             // Upload success
             return parent::format_value($base . '/' . $_FILES[$this->name]['name']);
         }
     }
     // Filename not specified, or Fail to upload
     return parent::format_value('');
 }

function plugin_attach_action()
{
    global $vars, $_attach_messages;
    // Backward compatible
    if (isset($vars['openfile'])) {
        $vars['file'] = $vars['openfile'];
        $vars['pcmd'] = 'open';
    }
    if (isset($vars['delfile'])) {
        $vars['file'] = $vars['delfile'];
        $vars['pcmd'] = 'delete';
    }
    $pcmd = isset($vars['pcmd']) ? $vars['pcmd'] : '';
    $refer = isset($vars['refer']) ? $vars['refer'] : '';
    $pass = isset($vars['pass']) ? $vars['pass'] : NULL;
    $page = isset($vars['page']) ? $vars['page'] : '';
    if ($refer != '' && is_pagename($refer)) {
        if (in_array($pcmd, array('info', 'open', 'list'))) {
            check_readable($refer);
        } else {
            check_editable($refer);
        }
    }
    // Dispatch
    if (isset($_FILES['attach_file'])) {
        // Upload
        return attach_upload($_FILES['attach_file'], $refer, $pass);
    } else {
        switch ($pcmd) {
            case 'delete':
                /*FALLTHROUGH*/
            /*FALLTHROUGH*/
            case 'freeze':
            case 'unfreeze':
                if (PKWK_READONLY) {
                    die_message('PKWK_READONLY prohibits editing');
                }
        }
        switch ($pcmd) {
            case 'info':
                return attach_info();
            case 'delete':
                return attach_delete();
            case 'open':
                return attach_open();
            case 'list':
                return attach_list();
            case 'freeze':
                return attach_freeze(TRUE);
            case 'unfreeze':
                return attach_freeze(FALSE);
            case 'rename':
                return attach_rename();
            case 'upload':
                return attach_showform();
        }
        if ($page == '' || !is_page($page)) {
            return attach_list();
        } else {
            return attach_showform();
        }
    }
}

function plugin_paint_action()
{
    global $script, $vars, $pkwk_dtd, $_paint_messages;
    // if (PKWK_READONLY) die_message('PKWK_READONLY prohibits editing');
    if (auth::check_role('readonly')) {
        die_message('PKWK_READONLY prohibits editing');
    }
    //戻り値を初期化
    $retval['msg'] = $_paint_messages['msg_title'];
    $retval['body'] = '';
    if (array_key_exists('attach_file', $_FILES) and array_key_exists('refer', $vars)) {
        $file = $_FILES['attach_file'];
        //BBSPaiter.jarは、shift-jisで内容を送ってくる。面倒なのでページ名はエンコードしてから送信させるようにした。
        $vars['page'] = $vars['refer'] = decode($vars['refer']);
        $filename = $vars['filename'];
        $filename = mb_convert_encoding($filename, SOURCE_ENCODING, 'auto');
        //ファイル名置換
        $attachname = preg_replace('/^[^\\.]+/', $filename, $file['name']);
        //すでに存在した場合、 ファイル名に'_0','_1',...を付けて回避(姑息)
        $count = '_0';
        while (file_exists(UPLOAD_DIR . encode($vars['refer']) . '_' . encode($attachname))) {
            $attachname = preg_replace('/^[^\\.]+/', $filename . $count++, $file['name']);
        }
        $file['name'] = $attachname;
        if (!exist_plugin('attach') or !function_exists('attach_upload')) {
            return array('msg' => 'attach.inc.php not found or not correct version.');
        }
        $retval = attach_upload($file, $vars['refer'], TRUE);
        if ($retval['result'] == TRUE) {
            $retval = paint_insert_ref($file['name']);
        }
    } else {
        $message = '';
        $refer = $s_refer = '';
        if (array_key_exists('refer', $vars)) {
            $refer = $vars['refer'];
            $s_refer = htmlspecialchars($vars['refer']);
        }
        $url = get_page_uri($refer);
        $link = "<p><a href=\"{$url}\">{$s_refer}</a></p>";
        $w = PAINT_APPLET_WIDTH;
        $h = PAINT_APPLET_HEIGHT;
        //ウインドウモード :)
        if ($w < 50 and $h < 50) {
            $w = $h = 0;
            $retval['msg'] = '';
            $vars['page'] = $vars['refer'];
            $vars['cmd'] = 'read';
            $retval['body'] = convert_html(get_source($vars['refer']));
            $link = '';
        }
        //XSS脆弱性問題 - 外部から来た変数をエスケープ
        $width = empty($vars['width']) ? PAINT_DEFAULT_WIDTH : $vars['width'];
        $height = empty($vars['height']) ? PAINT_DEFAULT_HEIGHT : $vars['height'];
        $f_w = (is_numeric($width) and $width > 0) ? $width : PAINT_DEFAULT_WIDTH;
        $f_h = (is_numeric($height) and $height > 0) ? $height : PAINT_DEFAULT_HEIGHT;
        $f_refer = array_key_exists('refer', $vars) ? encode($vars['refer']) : '';
        // BBSPainter.jarがshift-jisに変換するのを回避
        $f_digest = array_key_exists('digest', $vars) ? htmlspecialchars($vars['digest']) : '';
        $f_no = (array_key_exists('paint_no', $vars) and is_numeric($vars['paint_no'])) ? $vars['paint_no'] + 0 : 0;
        if ($f_w > PAINT_MAX_WIDTH) {
            $f_w = PAINT_MAX_WIDTH;
        }
        if ($f_h > PAINT_MAX_HEIGHT) {
            $f_h = PAINT_MAX_HEIGHT;
        }
        $retval['body'] .= <<<EOD
 <div>
 {$link}
 {$message}
 <applet codebase="." archive="BBSPainter.jar" code="Main.class" width="{$w}" height="{$h}">
 <param name="size" value="{$f_w},{$f_h}" />
 <param name="action" value="{$script}" />
 <param name="image" value="attach_file" />
 <param name="form1" value="filename={$_paint_messages['field_filename']}=!" />
 <param name="form2" value="yourname={$_paint_messages['field_name']}" />
 <param name="comment" value="msg={$_paint_messages['field_comment']}" />
 <param name="param1" value="plugin=paint" />
 <param name="param2" value="refer={$f_refer}" />
 <param name="param3" value="digest={$f_digest}" />
 <param name="param4" value="max_file_size=1000000" />
 <param name="param5" value="paint_no={$f_no}" />
 <param name="enctype" value="multipart/form-data" />
 <param name="return.URL" value="{$url}" />
 </applet>
 </div>
EOD;
        // XHTML 1.0 Transitional
        if (!isset($pkwk_dtd) || $pkwk_dtd == PKWK_DTD_XHTML_1_1) {
            $pkwk_dtd = PKWK_DTD_XHTML_1_0_TRANSITIONAL;
        }
    }
    return $retval;
}

 function format_value($str)
 {
     if (array_key_exists($this->name, $_FILES)) {
         require_once PLUGIN_DIR . 'attach.inc.php';
         $result = attach_upload($_FILES[$this->name], $this->page);
         if ($result['result']) {
             return parent::format_value($this->page . '/' . $_FILES[$this->name]['name']);
         }
     }
     // ファイルが指定されていないか、アップロードに失敗
     return parent::format_value('');
 }

        } else {
            if ($subject == '' && $message == '') {
                showmessage('post_sm_isnull');
            }
        }
        if ($editedby && $timestamp - $orig['dateline'] > 60 && $adminid != 1) {
            include_once language('misc');
            $editor = $isanonymous && $isorigauthor ? $language['anonymous'] : $discuz_user;
            $edittime = gmdate($_DCACHE['settings']['dateformat'] . ' ' . $_DCACHE['settings']['timeformat'], $timestamp + $timeoffset * 3600);
            eval("\$message = \"{$language['post_edit']}\".\$message;");
        }
        $bbcodeoff = checkbbcodes($message, !empty($bbcodeoff));
        $smileyoff = checksmilies($message, !empty($smileyoff));
        $tagoff = $isfirstpost ? !empty($tagoff) : 0;
        $htmlon = bindec(($tagstatus && $tagoff ? 1 : 0) . ($allowhtml && !empty($htmlon) ? 1 : 0));
        $uattachment = $allowpostattach && ($uattachments = attach_upload('attachupdate', 1)) ? 1 : 0;
        if ($uattachment) {
            $query = $db->query("SELECT aid, tid, pid, uid, attachment, thumb, remote FROM {$tablepre}attachments WHERE pid='{$pid}'");
            while ($attach = $db->fetch_array($query)) {
                $paid = 'paid' . $attach['aid'];
                $attachfileadd = '';
                if ($uattachment && isset($uattachments[$paid])) {
                    dunlink($attach['attachment'], $attach['thumb'], $attach['remote']);
                    $attachfileadd = 'dateline=\'' . $timestamp . '\',
							filename=\'' . $uattachments[$paid]['name'] . '\',
							filetype=\'' . $uattachments[$paid]['type'] . '\',
							filesize=\'' . $uattachments[$paid]['size'] . '\',
							attachment=\'' . $uattachments[$paid]['attachment'] . '\',
							thumb=\'' . $uattachments[$paid]['thumb'] . '\',
							isimage=\'-' . $uattachments[$paid]['isimage'] . '\',
							remote=\'' . $uattachments[$paid]['remote'] . '\',

function plugin_csv2newpage_upload($refer)
{
    global $vars;
    $start_line_no = empty($vars['start_line_no']) ? 0 : $vars['start_line_no'];
    if (empty($_FILES['attach_file'])) {
        return array('msg' => 'no attach_file', 'body' => 'Set attach file');
    }
    $file = $_FILES['attach_file'];
    $attachname = $file['name'];
    $filename = preg_replace('/\\..+$/', '', $attachname, 1);
    //すでに存在した場合、 ファイル名に'_0','_1',...を付けて回避(姑息)
    $count = '_0';
    while (file_exists(UPLOAD_DIR . encode($refer) . '_' . encode($attachname))) {
        $attachname = preg_replace('/^[^\\.]+/', $filename . $count++, $file['name']);
    }
    $file['name'] = $attachname;
    if (!exist_plugin('attach')) {
        return array('msg' => 'plugin not found', 'body' => 'The attach plugin is not found.');
    }
    $pass = empty($vars['pass']) ? NULL : md5($vars['pass']);
    $retval = attach_upload($file, $refer, $pass);
    if ($retval['result'] != TRUE) {
        return array('msg' => 'cannot upload', 'body' => 'cannot upload: ' . $attachname . ',' . $retval);
    }
    $realfile = UPLOAD_DIR . encode($refer) . '_' . encode($attachname);
    if (!is_file($realfile)) {
        return array('msg' => 'not found the attached file', 'body' => "The attached file:'{$attachname}' does not exist in '{$refer}'.<br />({$realfile})");
    }
    $postdata_old = file($realfile);
    $line = join('', $postdata_old);
    $code = mb_detect_encoding($line);
    $line = mb_convert_encoding($line, SOURCE_ENCODING, $code);
    $csvlines = preg_split("/\r?\n/", $line);
    if ($start_line_no) {
        array_splice($csvlines, 0, $start_line_no);
    }
    return $csvlines;
}

     if (empty($vid) || empty($vsubject) || empty($vtag)) {
         showmessage('video_required_invalid');
     }
 }
 $sortid = $special && $forum['threadsorts']['types'][$sortid] ? 0 : $sortid;
 $typeexpiration = intval($typeexpiration);
 if ($forum['threadsorts']['expiration'][$typeid] && !$typeexpiration) {
     showmessage('threadtype_expiration_invalid');
 }
 $optiondata = array();
 if ($forum['threadsorts']['types'][$sortid] && !$forum['allowspecialonly']) {
     $optiondata = threadsort_validator($typeoption);
 }
 $author = !$isanonymous ? $discuz_user : '';
 $moderated = $digest || $displayorder > 0 ? 1 : 0;
 $attachment = $allowpostattach && ($attachments = attach_upload()) ? $imageexists ? 2 : 1 : 0;
 $subscribed = !empty($emailnotify) && $discuz_uid ? 1 : 0;
 $db->query("INSERT INTO {$tablepre}threads (fid, readperm, price, iconid, typeid, sortid, author, authorid, subject, dateline, lastpost, lastposter, displayorder, digest, special, attachment, subscribed, moderated)\r\n\t\tVALUES ('{$fid}', '{$readperm}', '{$price}', '{$iconid}', '{$typeid}', '{$sortid}', '{$author}', '{$discuz_uid}', '{$subject}', '{$timestamp}', '{$timestamp}', '{$author}', '{$displayorder}', '{$digest}', '{$special}', '{$attachment}', '{$subscribed}', '{$moderated}')");
 $tid = $db->insert_id();
 if ($subscribed) {
     $db->query("REPLACE INTO {$tablepre}subscriptions (uid, tid, lastpost, lastnotify)\r\n\t\t\tVALUES ('{$discuz_uid}', '{$tid}', '{$timestamp}', '{$timestamp}')", 'UNBUFFERED');
 }
 if ($special == 3 && $allowpostreward) {
     $db->query("INSERT INTO {$tablepre}rewardlog (tid, authorid, netamount, dateline) VALUES ('{$tid}', '{$discuz_uid}', {$realprice}, '{$timestamp}')");
 }
 $db->query("REPLACE INTO {$tablepre}mythreads (uid, tid, dateline, special) VALUES ('{$discuz_uid}', '{$tid}', '{$timestamp}', '{$special}')", 'UNBUFFERED');
 if ($moderated) {
     updatemodlog($tid, $displayorder > 0 ? 'STK' : 'DIG');
     updatemodworks($displayorder > 0 ? 'STK' : 'DIG', 1);
 }
 if ($special == 1) {

/**
* 画像を添付するためのもの
*/
function plugin_show_action()
{
    global $script, $vars, $username;
    global $html_transitional;
    $qm = get_qm();
    //check auth
    $editable = edit_auth($vars['refer'], FALSE, FALSE);
    if (!$editable) {
        return array('msg' => $qm->m['plg_attachref']['title_ntc_admin'], 'body' => '<p>' . $qm->m['plg_attachref']['ntc_admin'] . '</p>');
    }
    //戻り値を初期化
    $retval['msg'] = $qm->m['plg_attachref']['title'];
    $retval['body'] = '';
    if (array_key_exists('attach_file', $_FILES) and array_key_exists('refer', $vars) and is_page($vars['refer'])) {
        $file = $_FILES['attach_file'];
        $attachname = $file['name'];
        $filename = preg_replace('/\\..+$/', '', $attachname, 1);
        //! swfuを持っていたら (管理者のみ)--------------------------------------------
        if ($editable && has_swfu()) {
            //アップロードするファイル名を決める（日本語ダメ、重複もダメ）
            $upload_name = $file['name'];
            if (preg_match('/^[-_.+a-zA-Z0-9]+$/', $upload_name)) {
                while (!$overwrite && file_exists(SWFU_IMAGE_DIR . $upload_name)) {
                    $upload_name = 's_' . $upload_name;
                }
                $upload_file = SWFU_IMAGE_DIR . $upload_name;
                $fname = $upload_name;
                $disp = $qm->m['plg_attachref']['img_desc'];
            } else {
                $matches = array();
                if (!preg_match('/[^.]+\\.(.*)$/', $upload_name, $matches)) {
                    echo 'invalid file name : ' . $upload_name;
                    exit(0);
                }
                $ext = $matches[1];
                $tmp_name = tempnam(SWFU_IMAGE_DIR, 'auto_');
                $upname = $tmp_name . '.' . $ext;
                $disp = $upload_name;
                rename($tmp_name, $upname);
                $upload_file = SWFU_IMAGE_DIR . basename($upname);
                $fname = basename($upname);
            }
            move_uploaded_file($file['tmp_name'], $upload_file);
            chmod($upload_file, 0666);
            //regist db
            $stat = stat($upload_file);
            $data = array('name' => $fname, 'description' => $disp, 'created' => $stat['mtime'], 'size' => $stat['size'], 'page_name' => $vars['refer']);
            require_once SWFU_TEXTSQL_PATH;
            $db = new CTextDB(SWFU_IMAGEDB_PATH);
            $db->insert($data);
            $retval = show_insert_ref(SWFU_IMAGE_DIR . $fname);
            return $retval;
        }
        // open qhm用 attachフォルダにファイルを置く
        //すでに存在した場合、 ファイル名に'_0','_1',...を付けて回避(姑息)
        $count = '_0';
        while (file_exists('./attach/' . encode($vars['refer']) . '_' . encode($attachname))) {
            $attachname = preg_replace('/^[^\\.]+/', $filename . $count++, $file['name']);
        }
        $file['name'] = $attachname;
        require_once PLUGIN_DIR . "attach.inc.php";
        if (!exist_plugin('attach') or !function_exists('attach_upload')) {
            return array('msg' => $qm->m['plg_attachref']['err_notfound']);
        }
        $pass = array_key_exists('pass', $vars) ? $vars['pass'] : NULL;
        $retval = attach_upload($file, $vars['refer'], $pass);
        if ($retval['result'] == TRUE) {
            $retval = show_insert_ref($file['name']);
        }
    } else {
        $retval = show_showform();
        // XHTML 1.0 Transitional
        $html_transitional = TRUE;
    }
    return $retval;
}

function plugin_attach_action()
{
    global $vars, $_attach_messages, $_string;
    // Backward compatible
    if (isset($vars['openfile'])) {
        $vars['file'] = $vars['openfile'];
        $vars['pcmd'] = 'open';
    }
    if (isset($vars['delfile'])) {
        $vars['file'] = $vars['delfile'];
        $vars['pcmd'] = 'delete';
    }
    $pcmd = isset($vars['pcmd']) ? $vars['pcmd'] : NULL;
    $refer = isset($vars['refer']) ? $vars['refer'] : NULL;
    $pass = isset($vars['pass']) ? $vars['pass'] : NULL;
    $page = isset($vars['page']) ? $vars['page'] : $refer;
    if (!empty($page)) {
        $wiki = Factory::Wiki($page);
        if ($wiki->isValied()) {
            // メソッドによってパーミッションを分ける
            if (in_array($pcmd, array('info', 'open', 'list'))) {
                // 読み込み許可
                $wiki->checkReadable();
            } else {
                // 書き込み許可があるか
                $wiki->checkEditable();
            }
        }
    }
    if (in_array($pcmd, array('delete', 'freeze', 'unfreeze'))) {
        if (Auth::check_role('readonly')) {
            Utility::dieMessage($_string['error_prohibit']);
        }
    }
    switch ($pcmd) {
        case 'info':
            return attach_info();
        case 'delete':
            return attach_delete();
        case 'open':
            return attach_open();
        case 'list':
            return attach_list($page);
        case 'freeze':
            return attach_freeze(TRUE);
        case 'unfreeze':
            return attach_freeze(FALSE);
        case 'rename':
            return attach_rename();
        default:
        case 'upload':
            return attach_showform();
        case 'form':
            return array('msg' => str_replace('$1', $refer, $_attach_messages['msg_upload']), 'body' => attach_form($refer));
        case 'post':
            return attach_upload($page, $pass);
        case 'progress':
            return PluginRenderer::getUploadProgress();
    }
    return empty($page) || !$wiki->isValied() ? attach_list() : attach_showform();
}

            break;
        }
    }
}
$typeid = isset($typeid) ? $typeid : 0;
$tradetypeid = isset($tradetypeid) ? $tradetypeid : 0;
$iconid = !empty($iconid) && isset($_DCACHE['icons'][$iconid]) ? $iconid : 0;
$displayorder = $modnewthreads ? -2 : ($forum['ismoderator'] && !empty($sticktopic) ? 1 : 0);
$digest = $forum['ismoderator'] && !empty($addtodigest) ? 1 : 0;
$blog = $allowuseblog && $forum['allowshare'] && !empty($addtoblog) ? 1 : 0;
$readperm = $allowsetreadperm ? $readperm : 0;
$isanonymous = $isanonymous && $allowanonymous ? 1 : 0;
$threadmessage = $counterdesc . "\t\t\t" . $aboutcounter;
$author = !$isanonymous ? $discuz_user : '';
$moderated = $digest || $displayorder > 0 ? 1 : 0;
$attachment = $allowpostattach && ($attachments = attach_upload()) ? 1 : 0;
$subscribed = !empty($emailnotify) && $discuz_uid ? 1 : 0;
$supe_pushstatus = $supe['status'] && $forum['supe_pushsetting']['status'] == 1 && !$modnewthreads ? '1' : '0';
$sgidadd1 = $sgidadd2 = '';
if ($iscircle) {
    $sgidadd1 = ', sgid';
    $sgidadd2 = ", '{$sgid}'";
}
$db->query("INSERT INTO {$tablepre}threads (fid, readperm, price, iconid, typeid, author, authorid, subject, dateline, lastpost, lastposter, displayorder, digest, blog, special, attachment, subscribed, moderated, supe_pushstatus, replies {$sgidadd1})\r\n\tVALUES ('{$fid}', '{$readperm}', '{$price}', '{$iconid}', '{$typeid}', '{$author}', '{$discuz_uid}', '{$subject}', '{$timestamp}', '{$timestamp}', '{$author}', '{$displayorder}', '{$digest}', '{$blog}', '{$special}', '{$attachment}', '{$subscribed}', '{$moderated}', '{$supe_pushstatus}', '1' {$sgidadd2})");
$tid = $db->insert_id();
if ($subscribed) {
    $db->query("REPLACE INTO {$tablepre}subscriptions (uid, tid, lastpost, lastnotify)\r\n\t\tVALUES ('{$discuz_uid}', '{$tid}', '{$timestamp}', '{$timestamp}')", 'UNBUFFERED');
}
$db->query("REPLACE INTO {$tablepre}mythreads (uid, tid, dateline, special) VALUES ('{$discuz_uid}', '{$tid}', '{$timestamp}', '{$special}')", 'UNBUFFERED');
if ($moderated) {
    updatemodlog($tid, $displayorder > 0 ? 'STK' : 'DIG');

     if (!empty($_FILES['tradeattach']['tmp_name'][0])) {
         $_FILES['attach'] = array_merge_recursive((array) $_FILES['attach'], $_FILES['tradeattach']);
     }
 }
 $attachnum = 0;
 if ($allowpostattach && !empty($_FILES['attach']) && is_array($_FILES['attach'])) {
     foreach ($_FILES['attach']['name'] as $attachname) {
         if ($attachname != '') {
             $attachnum++;
         }
     }
     $attachnum && checklowerlimit($postattachcredits, $attachnum);
 } else {
     $_FILES = array();
 }
 $attachments = $attachnum ? attach_upload() : array();
 $attachment = empty($attachments) ? 0 : ($imageexists ? 2 : 1);
 $subscribed = $thread['subscribed'] && $timestamp - $thread['lastpost'] < 7776000;
 $newsubscribed = !empty($emailnotify) && $discuz_uid;
 if ($subscribed && !$modnewreplies) {
     $db->query("UPDATE {$tablepre}subscriptions SET lastpost='{$timestamp}' WHERE tid='{$tid}' AND uid<>'{$discuz_uid}'", 'UNBUFFERED');
 }
 if ($newsubscribed) {
     $db->query("REPLACE INTO {$tablepre}subscriptions (uid, tid, lastpost, lastnotify)\r\n\t\t\tVALUES ('{$discuz_uid}', '{$tid}', '" . ($modnewreplies ? $thread['lastpost'] : $timestamp) . "', '{$timestamp}')", 'UNBUFFERED');
 }
 $bbcodeoff = checkbbcodes($message, !empty($bbcodeoff));
 $smileyoff = checksmilies($message, !empty($smileyoff));
 $parseurloff = !empty($parseurloff);
 $htmlon = $allowhtml && !empty($htmlon) ? 1 : 0;
 $usesig = !empty($usesig) ? 1 : 0;
 $isanonymous = $allowanonymous && !empty($isanonymous) ? 1 : 0;

		$depict = $type == 'image' ? "Image File " : 'All Support Formats ';
		echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?><parameter><allowsExtend><extend depict=\"$depict\">$attachextensions</extend></allowsExtend><language>$xmllang</language><config><userid>$discuz_uid</userid><hash>$swfhash</hash><maxupload>$maxattachsize</maxupload></config></parameter>";

	} elseif($operation == 'upload') {

		$uid = intval($_POST['uid']);
		$aid = 0;
		$isimage = 0;
		$simple = !empty($simple) ? $simple : 0;
		$groupid = intval($db->result_first("SELECT groupid FROM {$tablepre}members WHERE uid='$uid'"));
		@include DISCUZ_ROOT.'./forumdata/cache/usergroup_'.$groupid.'.php';
		$swfhash = md5(substr(md5($_DCACHE['settings']['authkey']), 8).$uid);
		$statusid = -1;
		if(!$_FILES['Filedata']['error'] && $_POST['hash'] == $swfhash) {
			require_once './include/post.func.php';
			$attachments = attach_upload('Filedata');
			if($attachments) {
				if(is_array($attachments)) {
					$attach = $attachments[0];
					$isimage = $attach['isimage'];
					if(!$simple) {
						require_once DISCUZ_ROOT.'include/chinese.class.php';
						$c = new Chinese('utf8', $charset);
						$attach['name'] = addslashes($c->Convert(urldecode($attach['name'])));
						if($type != 'image' && $isimage) $isimage = -1;
					} elseif($simple == 1 && $type != 'image' && $isimage) {
						$isimage = -1;
					} elseif($simple == 2 && $type == 'image' && !$isimage) {
						dunlink($attach['attachment'], $attach['thumb'], $attach['remote']);
						echo "DISCUZUPLOAD|1|4|0|0|";
						exit;

function plugin_attachref_action()
{
    global $vars;
    global $_attachref_messages;
    $retval['msg'] = $_attachref_messages['msg_title'];
    $retval['body'] = '';
    $refer = isset($vars['refer']) ? $vars['refer'] : false;
    if (isset($_FILES[PLUGIN_ATTACH_FILE_FIELD_NAME]) && $refer !== false) {
        $wiki = Factory::Wiki($refer);
        if (!$wiki->isValied()) {
            Utility::dieMessage('#attachref : invalied page.');
        }
        $file = $_FILES[PLUGIN_ATTACH_FILE_FIELD_NAME];
        $attachname = $file['name'][0];
        $filename = preg_replace('/\\..+$/', '', $attachname, 1);
        // If exist file, add a name '_0', '_1', ...
        $count = '_0';
        while (file_exists(UPLOAD_DIR . encode($refer) . '_' . encode($attachname))) {
            $attachname = preg_replace('/^[^\\.]+/', $filename . $count++, $attachname);
        }
        $file['name'][0] = $attachname;
        $attach_filename = attachref_get_attach_filename($file);
        $pass = isset($vars['pass']) ? md5($vars['pass']) : NULL;
        $retval = attach_upload($refer, $pass);
        if ($retval['result'] == TRUE) {
            $retval = attachref_insert_ref($attach_filename);
        }
        Utility::redirect($wiki->uri());
    } else {
        $retval = attachref_showform();
    }
    return $retval;
}

function plugin_attachref_action()
{
    global $script, $vars;
    global $_attachref_messages;
    global $pkwk_dtd;
    $retval['msg'] = $_attachref_messages['msg_title'];
    $retval['body'] = '';
    if (isset($_FILES['attach_file']) && isset($vars['refer']) && is_page($vars['refer'])) {
        $file = $_FILES['attach_file'];
        $attachname = $file['name'];
        $filename = preg_replace('/\\..+$/', '', $attachname, 1);
        // If exist file, add a name '_0', '_1', ...
        $count = '_0';
        while (file_exists(UPLOAD_DIR . encode($vars['refer']) . '_' . encode($attachname))) {
            $attachname = preg_replace('/^[^\\.]+/', $filename . $count++, $file['name']);
        }
        $file['name'] = $attachname;
        require_once PLUGIN_DIR . 'attach.inc.php';
        if (!exist_plugin('attach') or !function_exists('attach_upload')) {
            return array('msg' => 'attach.inc.php not found or not correct version.');
        }
        $attach_filename = attachref_get_attach_filename($file);
        $pass = isset($vars['pass']) ? md5($vars['pass']) : NULL;
        $retval = attach_upload($file, $vars['refer'], $pass);
        if ($retval['result'] == TRUE) {
            $retval = attachref_insert_ref($attach_filename);
        }
    } else {
        $retval = attachref_showform();
        // XHTML 1.0 Transitional
        if (!isset($pkwk_dtd) || $pkwk_dtd == PKWK_DTD_XHTML_1_1) {
            $pkwk_dtd = PKWK_DTD_XHTML_1_0_TRANSITIONAL;
        }
    }
    return $retval;
}