upload.php

make project on java

<?php
include'include/begin.php';
echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />';
userp1();
$type = $_GET['type'];
$wid=(int)$_GET['wid'];
$fid = (int)$_GET['fid'];
$id = (int)$_GET['id'];
jsign($_GET['sign'])?$sign = $_GET['sign']: jsechoerror(0);
$uptype = $_GET['uptype'];
$deltype = $_GET['deltype'];
$codedig = $_GET['codedig'];
$upsize = is_numeric($_POST['upsize'])?(int)$_POST['upsize']: '';
$sun = $_POST['sun']?1 : 0;
$mars = $_POST['mars']?1 : 0;
if ($_POST['sizet'] == 'b') {
    $sizet = 'B';
} else if ($_POST['sizet'] == 'k') {
    $sizet = 'K';
} else if ($_POST['sizet'] == 'g') {
    $sizet = 'G';
} else {
    $sizet = 'M';
} 

$_disabled=$userp1[8]?'':'disabled="disabled"';


if ($type == 'newtopic' && isset($whype[$wid])) {
    $menufile = 'wmenu' . $wid;
    wstyle($t4[$wid]);
    include language();
    $pagename_n = $wname[$wid];
	$pagename_m = $_pagename[11];
    $webnav=$wups[$wid]>0?$wname[$wups[$wid]]:$wname[$wid];
} else if ($type == 'newtopic' && $fid) {
    $id = 0;
    forumpurview();
    include language();
    $userp3[3]?null : jsechoerror(78);
    $userp3[4]?null : jsechoerror(11);
} else if ($type == 'newreply' && $id) {
    $p_result = mysql_query("select * from {$db_prefix}title where cid='$id'", $myconn);
    $sub = mysql_fetch_array($p_result);
    $fid = $sub[fid];
    if ($sub['updown'] == 2 || $sub['updown'] == 3 || $sub['updown'] == 5 || $sub['updown'] == 6) {
        $bbsmessage[2] = 1;
    } 
    forumpurview();
    include language();
    if ($sub['state'] == 0 && !$userp3[18]) {
        jsechoerror(1);
    } 
    $userp3[3]?null: jsechoerror(78);
    $userp3[5]?null : jsechoerror(12);
    if ($sub['locks']) {
        if (!$userp3[20]) {
            jsechoerror(13);
        } 
    } 
    if ($sub['lastposttime'] < $time - $reouttime) {
        if (!$userp1[5]) {
            echoerror(14);
        } 
    } 
    $id = 0;
} else if ($type == 'edit' && $wid) {
$userp3=NULL;
if (!$userp2[9]) {
 echoerror(143);       
    } 
	if (isset($whype[$wid])) {
$menufile = 'wmenu' . $wid;
    wstyle($t4[$wid]);
    include language();
	
} else {
    jsechoerror(70);
} 

    $p_result = mysql_query("select * from {$db_prefix}title where cid='$id' && wid='$wid'", $myconn);
    if ($sub = mysql_fetch_array($p_result)) {
        $fid = $sub[fid];
        $p_result = mysql_query("select * from {$db_prefix}posts where id='$id'", $myconn);
        $post = @mysql_fetch_array($p_result);
        $sign = $post['sign'];


        if ($sub['state'] == 0) {
            jsechoerror(4);
        } 

    } else {
	jsechoerror(71);
	} 
} else if ($type == 'edit') {
    $p_result = mysql_query("select * from {$db_prefix}title where cid='$id'", $myconn);
    if ($sub = mysql_fetch_array($p_result)) {
        $fid = $sub[fid];
        $p_result = mysql_query("select * from {$db_prefix}posts where id='$id'", $myconn);
        $post = @mysql_fetch_array($p_result);
        $sign = $post['sign'];
        forumpurview();
        include language();
        $userp3[3]?null : jsechoerror(78);
        if ($sub['state'] == 0 && !$userp3[18]) {
            jsechoerror(4);
        } 
        if ($sub[elite] && !$userp3[21]) {
            jsechoerror(2);
        } 
        if ($sub['locks'] && !$userp3[20]) {
            jsechoerror(106);
        } 
        if ($sub['updown'] == 1 && !$userp3[23]) {
            jsechoerror(93);
        } 
        if ($sub['updown'] == 2 && !$userp3[24]) {
            jsechoerror(93);
        } 
        if ($sub['updown'] == 3 && !$userp3[25]) {
            jsechoerror(93);
        } 
        if ($sub['updown'] == 4 && !$userp3[26]) {
            jsechoerror(94);
        } 
        if ($sub['updown'] == 5 && !$userp3[27]) {
            jsechoerror(94);
        } 
        if ($sub['updown'] == 6 && !$userp3[28]) {
            jsechoerror(94);
        } 
        if (!$userp3[18]) {
            if ($sub[author] != $username) {
                jsechoerror(107);
            } 
            if (($time - $sub[posttime]) > $userp1[3] * 60) {
                jsechoerror(108);
            } 
        } 
    } else {
        $p_result = mysql_query("select * from {$db_prefix}posts where id='$id'", $myconn);
        $post = mysql_fetch_array($p_result);
        $p_result = mysql_query("select * from {$db_prefix}title where cid='$post[tid]'", $myconn);
        $sub = @mysql_fetch_array($p_result);
        $fid = $sub['fid'];
        if ($sub['updown'] == 2 || $sub['updown'] == 3 || $sub['updown'] == 5 || $sub['updown'] == 6) {
            $bbsmessagefix = 1;
        } 
        $sign = $post['sign'];
        forumpurview();
        include language();
        $userp3[3]?null : jsechoerror(78);
        if ($post['state'] == 0 && !$userp3[18]) {
            jsechoerror(104);
        } 
        if ($sub['state'] == 0 && !$userp3[18]) {
            jsechoerror(4);
        } 
        if (!$userp3[18]) {
            if ($post[author] != $username) {
                jsechoerror(107);
            } 
            if (($time - $post[posttime]) > $userp1[3] * 60) {
                jsechoerror(108);
            } 
        } 
    } 
} else {
    jsechoerror(0);
} 

unset($ta, $ua, $fa, $pa, $txtlist, $urllist, $filelist, $polllist, $dell);
$annexsql = mysql_query("select * from {$db_prefix}annex where sign='$sign'", $myconn);
while ($annex = mysql_fetch_array($annexsql)) {
    if ($type == 'newtopic' || type == 'newreply') {
        if ($annex['tid'] > 0) {
            jsechoerror(137);
        } 
    } else {
        if ($annex['tid'] > 0 && $annex['tid'] != $id) {
            jsechoerror(137);
        } 
    } 
    $temp = '&nbsp;';
    if ($annex['code'] == 'txt') {
        $tks = explode('|', $annex['type']);
        if ($tks[0] == "a") {
            $temp .= $abc[0] . ':' . $tks[1];
        } else if ($tks[0] == 'b') {
            $temp .= $abc[1] . ':' . $tks[1];
        } else if ($tks[0] == 'c') {
            $temp .= $abc[2] . ':' . $tks[1];
        } else {
            $temp .= $_p_upload[2];
        } 
        $ta[] = $annex[codedig];
        $txtlist .= "<li><A href=\\\"javascript:void(0)\\\" onclick=insertText('[ax" . $annex['id'] . "]')>" . htmlspecialchars($annex[title]) . "&nbsp;[ax" . $annex['id'] . "]</A>" . $temp . "\t<input name=delid[] value=" . $annex['id'] . " type=checkbox />" . $_p_upload[3] . "\t".$_p_upload[4].'<input name=downid['.$annex['id'].'] type=text '.$_disabled.' value='.$annex['downnum'].' size=7 maxlength=7 /></li>';
    } elseif ($annex['code'] == 'url') {
        $tks = explode('|', $annex['type']);
        if ($tks[0] == 'a') {
            $temp .= $abc[0] . ':' . $tks[1];
        } else if ($tks[0] == 'b') {
            $temp .= $abc[1] . ':' . $tks[1];
        } else if ($tks[0] == 'c') {
            $temp .= $abc[2] . ':' . $tks[1];
        } else {
            $temp .= $_p_upload[2];
        }