<?php
	include('../../../../wp-config.php');
	mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
	if($_POST['submit']=='Lae pilt'){
		$blogurl = $_POST['url'];
		$randomnumber = rand(0,99);
		$target_path = "../../../uploads/wpsc/variation_images/";
		$target_path = $target_path.$randomnumber.urlencode(basename($_FILES['file']['name']));
		if ((($_FILES["file"]["type"] == "image/gif") || ($_FILES["file"]["type"] == "image/jpeg") || ($_FILES["file"]["type"] == "image/jpg") ||
			 ($_FILES["file"]["type"] == "image/png")) && ($_FILES["file"]["size"] < 5000000)){
			if ($_FILES["file"]["error"] > 0){
				header('Location: '.$blogurl.'/wp-content/plugins/wp-e-commerce/wpsc-admin/add-variation-picture.php?variation-group-id='.$_POST['posted-variation-group-id'].'&variation-id='.$_POST['posted-variation-id'].'&url='.$blogurl.'&error=2');
			} else {
				if(!file_exists($target_path)){
					if(move_uploaded_file($_FILES['file']['tmp_name'], $target_path)){
						$filename = $randomnumber.urlencode(basename($_FILES['file']['name']));
						mysql_query('UPDATE wp_wpsc_variation_values SET variation_picture="'.$filename.'" WHERE id="'.$_POST['posted-variation-id'].'" AND variation_id="'.$_POST['posted-variation-group-id'].'"');
						header('Location: '.$blogurl.'/wp-content/plugins/wp-e-commerce/wpsc-admin/add-variation-picture.php?variation-group-id='.$_POST['posted-variation-group-id'].'&variation-id='.$_POST['posted-variation-id'].'&url='.$blogurl.'&error=1');
					} else{
						header('Location: '.$blogurl.'/wp-content/plugins/wp-e-commerce/wpsc-admin/add-variation-picture.php?variation-group-id='.$_POST['posted-variation-group-id'].'&variation-id='.$_POST['posted-variation-id'].'&url='.$blogurl.'&error=3');
					}
				} else {
					header('Location: '.$blogurl.'/wp-content/plugins/wp-e-commerce/wpsc-admin/add-variation-picture.php?variation-group-id='.$_POST['posted-variation-group-id'].'&variation-id='.$_POST['posted-variation-id'].'&url='.$blogurl.'&error=4');
				}
			}
		} else {
			header('Location: '.$blogurl.'/wp-content/plugins/wp-e-commerce/wpsc-admin/add-variation-picture.php?variation-group-id='.$_POST['posted-variation-group-id'].'&variation-id='.$_POST['posted-variation-id'].'&url='.$blogurl.'&error=5');
		}
	}
	if($_GET['delete']=='picture'){
		unlink('../../../uploads/wpsc/variation_images/'.urlencode($_GET['filename']));
		mysql_query('UPDATE wp_wpsc_variation_values SET variation_picture="" WHERE id="'.$_GET['get-variation-id'].'" AND variation_id='.$_GET['get-variation-group-id'].'');
		header('Location: '.$_GET['url'].'/wp-content/plugins/wp-e-commerce/wpsc-admin/add-variation-picture.php?variation-group-id='.$_GET['get-variation-id'].'&variation-id='.$_GET['get-variation-group-id'].'&url='.$_GET['url'].'&error=6');
	}
?>