Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
call_actions.php	3.5 KB	-rw-r--r--	2026-02-22 20:21
chat_actions.php	4.36 KB	-rw-r--r--	2026-02-22 19:13
delete_story.php	1.79 KB	-rw-r--r--	2026-02-21 23:17
error_log	14.72 KB	-rw-r--r--	2026-03-05 18:14
get_friends.php	1.83 KB	-rw-r--r--	2026-02-22 18:39
get_messages.php	1.17 KB	-rw-r--r--	2026-02-22 17:43
get_my_stories.php	1.02 KB	-rw-r--r--	2026-02-21 23:06
get_stories.php	1.92 KB	-rw-r--r--	2026-02-21 23:03
handle_request.php	2.05 KB	-rw-r--r--	2026-02-21 21:55
mark_story_seen.php	853 B	-rw-r--r--	2026-02-21 23:03
message_action.php	1.8 KB	-rw-r--r--	2026-02-21 23:19
search_users.php	1.07 KB	-rw-r--r--	2026-02-21 21:55
send_message.php	1.68 KB	-rw-r--r--	2026-02-21 23:17
send_request.php	1.65 KB	-rw-r--r--	2026-02-21 22:18
update_profile.php	4.85 KB	-rw-r--r--	2026-02-21 22:49
upload_chat_media.php	1.86 KB	-rw-r--r--	2026-02-22 18:37
upload_story.php	2.6 KB	-rw-r--r--	2026-02-21 22:59
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
session_start();
require_once '../includes/db.php';
require_once '../includes/functions.php';

header('Content-Type: application/json');

if (!isLoggedIn() || $_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['success' => false, 'error' => 'Unauthorized']);
    exit;
}

$user_id = $_SESSION['user_id'];
$type = isset($_POST['type']) ? $_POST['type'] : 'image';

if (!isset($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK) {
    echo json_encode(['success' => false, 'error' => 'No file uploaded']);
    exit;
}

$fileTmpPath = $_FILES['file']['tmp_name'];
$fileName = $_FILES['file']['name'];
$fileNameCmps = explode(".", $fileName);
$fileExtension = strtolower(end($fileNameCmps));

$allowedExtensions = [];
if ($type === 'image') {
    $allowedExtensions = ['jpg', 'jpeg', 'png', 'gif', 'webp'];
}
elseif ($type === 'video') {
    $allowedExtensions = ['mp4', 'mov', 'avi', 'mkv'];
}
elseif ($type === 'audio') {
    $allowedExtensions = ['webm', 'mp3', 'wav', 'm4a', 'ogg'];
}
elseif ($type === 'document') {
    $allowedExtensions = ['pdf', 'doc', 'docx', 'txt', 'zip', 'rar', 'xls', 'xlsx'];
}
else {
    echo json_encode(['success' => false, 'error' => 'Invalid type']);
    exit;
}

if (!in_array($fileExtension, $allowedExtensions)) {
    echo json_encode(['success' => false, 'error' => 'Invalid file extension: ' . $fileExtension]);
    exit;
}

$newFileName = 'chat_' . md5(time() . $fileName) . '.' . $fileExtension;
$uploadFileDir = '../assets/uploads/chat/';

if (!is_dir($uploadFileDir)) {
    mkdir($uploadFileDir, 0777, true);
}

$dest_path = $uploadFileDir . $newFileName;

if (move_uploaded_file($fileTmpPath, $dest_path)) {
    echo json_encode(['success' => true, 'file_url' => $newFileName]);
}
else {
    echo json_encode(['success' => false, 'error' => 'Error moving file']);
}