Thank you for your help 😃
I do thanks but can anyone fix this?
function do_pic_change()
{
global $db, $ir, $c, $userid, $h;
if (!isset($_POST['verf'])
|| !verify_csrf_code('prefs_picchange',
stripslashes($_POST['verf'])))
{
csrf_error('picchange');
}
$_POST['newpic'] =
(isset($_POST['newpic']) && is_string($_POST['newpic']))
? $_POST['newpic'] : '';
if (empty($_POST['newpic']))
{
echo '
You did not enter a new pic.<br />
> <a href="' . gen_url('preferences', true)
. '&action=picchange">Back</a>
';
}
else
{
if (strlen($_POST['newpic']) < 8
|| !(substr($_POST['newpic'], 0, 7) == 'http://'
|| substr($_POST['newpic'], 0, 8 == 'https://')))
{
echo 'Invalid Image.<br />> <a href="'
. gen_url('preferences', true)
. '&action=picchange">Go Back</a>';
die($h->endpage());
}
$image = (@getimagesize($_POST['newpic']));
if (!is_array($image))
{
echo 'Invalid Image.<br />> <a href="'
. gen_url('preferences', true)
. '&action=picchange">Go Back</a>';
die($h->endpage());
}
$db->query(
'UPDATE `users` SET `display_pic` = "' . $_POST['newpic']
. '" WHERE `userid` = ' . $userid);
echo htmlentities($_POST['newpic'], ENT_QUOTES, 'ISO-8859-1')
. '<br />
Pic changed!
<br />
> <a href="' . gen_url('index', true) . '">Go Home</a>
';
}
}
Its not working giving me an error of " Invalid Picture"