codice:
<?php
include("config.inc.php");
include("cook.inc.php");
$pati="kernelDB - Making inserction page Step 2";
include("cornsu.inc.php");

$err="0";
$tit=trim($_POST[tit]);
$tes=trim($_POST[tes]);
$fil=$_FILES[fil][name];
$filtem=$_FILES[fil][tmp_name];
$car=".";

if(strlen($tit)<15){$er1="Error title so short";++$err;};
if(strlen($tit)>50){$er2="Error title so long";++$err;};
if(strlen($tes)<25){$er3="Error text so short";++$err;};
$fp=fopen($filtem,r);
fseek($fp,4,seek_set);
$prova=fread($fp,13);
$par="Automatically";
if($prova!=$par){$er4="Error file isn' t a Unix kernel config file";++$err;};

$db=mysql_connect($db_host,$db_user,$db_password);
if($db==false){$er5="Connection error retry later";++$err;};
$con=mysql_select_db($db_name,$db);
if($con==false){$er6="Database error retry later";++$err;};

$query00="select userna from uteinf where userna='$use'";
$exq00=mysql_query($query00);
$rexq00=mysql_fetch_array($exq00);
if($rexq00[userna]!=$use){$er7="Error user no exist";++$err;};

$query5="select userna, titolo from uteins where titolo='$tit' and userna='$use'";
$exq5=mysql_query($query5);
if ($exq5==false){$er9="Error checking inserction";++$err;};
$row2=mysql_fetch_array($exq5);
if(empty($row2)==false){$er10="Inserction already exist for this user";++$err;};

if($err>0){
echo"There are one or more errors, <a href=insins0.php>Go back</a>
";
echo"<ul type=disc>";
if(isset($er1)){echo"[*]$er1";}
if(isset($er2)){echo"[*]$er2.";}
if(isset($er3)){echo"[*]$er3";}
if(isset($er4)){echo"[*]$er4";}
if(isset($er5)){echo"[*]$er5";}
if(isset($er6)){echo"[*]$er6";}
if(isset($er7)){echo"[*]$er7";}
if(isset($er8)){echo"[*]$er8";}
if(isset($er9)){echo"[*]$er9";}
if(isset($er10)){echo"[*]$er10";}
if(isset($er11)){echo"[*]$er11";}
if(isset($er12)){echo"[*]$er12";}
echo"[/list]";
break;};

$ti=time();

$err2="0";

$use1=str_replace(" ", "_", $use);
$tit1=str_replace(" ", "_", $tit);

$nnm=$use1."_".$tit1;
$des="fils/$nnm";
$mov=move_uploaded_file($_FILES[fil][tmp_name],$des);
if($mov=false){$er17="Error file upload";++$err2;};

$queins="insert into uteins (titolo, visite, downlo, testo, datain, userna) values('$tit', '0', '0', '$tes', '$ti', '$use')";
$exin=mysql_query($queins,$db);
if($exin==false){$er18="Internal error, inserting info";++$err2;};

if($err2>0){
echo"internal errors, retry later
";
echo$er13."
";
echo$er14."
";
echo$er15."
";
echo$er16."
";
echo$er17."
";
echo$er18."
";
break;};

$query456="select id from uteins where userna='$use' and titolo='$tit'";
$exq4546=mysql_query($query456);
if($exq4546==false){$idins="Id not availabe";};
$ar24=mysql_fetch_array($exq4546);
$idins=$ar24[id];

mysql_close($db);

echo"<META HTTP-EQUIV='Refresh' CONTENT='5;URL=vedi.php?id=$idins'>";
echo"Allright! Insert done.

";
echo"Inserction features:";
echo"<table border=1>";
echo"<tr><td>Title:</td></tr>";
echo"<tr><td></td><td>$tit</td></tr>";
echo"<tr><td>Description:</td></tr>";
echo"<tr><td></td><td>$tes</td></tr>";
echo"<tr><td>Inserction ID:</td></tr>";
echo"<tr><td></td><td>$idins</td></tr>";
echo"</table>";
include("corngi.inc.php");
?>
Questo script funzia vedi se riesci a cavarci qualcosa.