Image Upload -- HELP!

[redpenchill]

Code: Select all

<?php
   
   $item_name = $_POST['item_name'];
   $created = date("m/d/Y");
   $item_desc = $_POST['item_desc'];
   $item_price = $_POST['item_price'];
   $sold = "-1";
   $item_type = $_POST['item_type'];
   $public = $_POST['public'];
   $creator_id = $_SESSION['Id'];
   $creator = $_SESSION['Username'];
   
if(isset($_POST['submit'])) {
   
   // We must choose the allowed file types for your image uploading.
   $allowed = array('jpg','jpeg','png','gif');
   $file_name = $_FILES['userfile']['name'];
   $file_size = $_FILES['userfile']['size'];
   $file_temp = $_FILES['userfile']['tmp_name'];
   $upload_path = 'http://www.rain-chat.com/items/uploads/';
   $file_exte = strtolower(end(explode('.', $file_name)));
   $rename_file = rand(0000000,9999999);
   $new_name = $rename_file;
   $_name = $new_name.".".$file_exte;
   move_uploaded_file($file_temp, $upload_path . $_name);
   echo "Image Uploaded Successfully!
   <br /><br />
   <a href='../items/uploads/".$_name."'>
   <img src='../items/uploads/".$_name."'/>
   </a>
   <br /><br />";

   $total = "http://www.rain-chat.com/items/uploads/".$_name."";
   echo $total;

      mysql_query("INSERT INTO items VALUES('','$item_name','$created','$item_desc','$item_price','$sold','','$total','$item_type','$public','$creator','$creator_id')");
      //header('Location: index.php');
}

?>