ajgkqsldxvkqsldkqs
azelfkqsmkqsmlkdqsmld
azmlekdqmskdmlqskd
nkldsfkqsmldkqsmdmlskd
<?php
include("init.php");
include_once("classes.php");
if(isset($_POST['id'])){
	$mcrypt = new MCrypt();
	$response = array();
	$session = $mcrypt->decrypt($_POST['id']);
	$token = $mcrypt->decrypt($_POST['cid']);
	/* Fetch the information */
	$con = db_connect();
	$sql = session($con,$session);
	$success = 0;
	$message = "";
	if(db_rows($con,$sql)>0){
		/* fetch userid and create session token */
		$query = mysqli_query($con,$sql);
		while($row=mysqli_fetch_array($query)){
			$userid = $row['userid'];
		}
		$sql = "select * from companies where token='".escape($con,$token)."'";
		if(db_rows($con,$sql)>0){
			/* company detail */
			$query = mysqli_query($con,$sql);
			while($row=mysqli_fetch_array($query)){
				$company = $row['id'];
				$logo = $row['logo'];
			}
			/* Validate image */
			$target_folder = "../../../company/logo/";
			if (isset($_FILES['image']['name'])) {
				$ext = strtolower(pathinfo($_FILES['image']['name'],PATHINFO_EXTENSION));
				$allowed_file =  array('jpg', 'jpeg','png','gif');
				/* give the file a new name */
				$image = md5($userid.$company.$_FILES['image']['name'].time()).".".$ext;
				$target_path = $target_folder.$image;
				if(!in_array($ext,$allowed_file)){
					echo  $mcrypt->encrypt('Only jpg,jpeg,png or gif files is allowed!');
				}else{
					/* Save the image file and update company account */
					if (move_uploaded_file($_FILES['image']['tmp_name'], $target_path)) {
						/* update logo and delete old log */
						$sql = "update companies set logo='".escape($con,$image)."' where id=".intval($company);
						if(mysqli_query($con,$sql)){
							/* Delete old image */
							if(!empty($logo)){
								unlink($target_folder.$logo);
							}
							echo  $mcrypt->encrypt('1');
						}else{
							echo  $mcrypt->encrypt('Server error. Please try again later.');
						}
					}else{
						echo  $mcrypt->encrypt('Logo uploading failed. Please try again later.');
					}
				}	
			}else{
				echo  $mcrypt->encrypt('No file received.');
			}
		}else{
			echo $mcrypt->encrypt("Company doesn't exist");
		}
	}
	db_close($con);
}