Committing the current version

This version works and has been tested in a full game with over 50
players however there isn’t as yet a proper admin backend and many
activities require the admin to fiddle with html or SQL at the moment.

uploadfile.php

@@ -0,0 +1,61 @@
+<?php include "base.php"; ?>  
+<?php
+//This function separates the extension from the rest of the file name and returns it 
+ function findexts ($filename) 
+ { 
+ $filename = strtolower($filename) ; 
+ $exts = split("[/\\.]", $filename) ; 
+ $n = count($exts)-1; 
+ $exts = $exts[$n]; 
+ return $exts; 
+ }  
+?>
+<?php
+$allowedExts = array("gif", "jpeg", "jpg", "png");
+$temp = explode(".", $_FILES["file"]["name"]);
+$extension = end($temp);
+if ((($_FILES["file"]["type"] == "image/gif")
+|| ($_FILES["file"]["type"] == "image/jpeg")
+|| ($_FILES["file"]["type"] == "image/jpg")
+|| ($_FILES["file"]["type"] == "image/pjpeg")
+|| ($_FILES["file"]["type"] == "image/x-png")
+|| ($_FILES["file"]["type"] == "image/png"))
+&& ($_FILES["file"]["size"] < 2000000)
+&& in_array($extension, $allowedExts))
+  {
+  if ($_FILES["file"]["error"] > 0)
+    {
+    echo "Return Code: " . $_FILES["file"]["error"] . "<br>";
+    }
+  else
+    {
+	    //This applies the function to our file  
+	    $ext = findexts ($_FILES["file"]["name"]) ;
+		$_FILES["file"]["name"] = $_SESSION['Username'].'.'.$ext;
+    //echo "Upload: " . $_FILES["file"]["name"] . "<br>";
+    //echo "Type: " . $_FILES["file"]["type"] . "<br>";
+    //echo "Size: " . ($_FILES["file"]["size"] / 1024) . " kB<br>";
+    //echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br>";
+
+    if (file_exists("upload/" . $_FILES["file"]["name"]))
+      {
+      echo $_FILES["file"]["name"] . " already exists. ";
+      }
+    else
+      {
+      move_uploaded_file($_FILES["file"]["tmp_name"],
+      "upload/" . $_FILES["file"]["name"]);
+      //echo "Stored in: " . "upload/" . $_FILES["file"]["name"];
+	  
+	  
+	  echo "<h1>Photo uploaded</h1>";  
+	  echo "<p>We are now redirecting you to the member area.</p>";  
+	  echo '<meta content="3;index.php" http-equiv="refresh">'; 
+      }
+    }
+  }
+else
+  {
+  echo "Invalid file";
+  }
+?>