} elseif ($stype == "p") {

	if (isset($_POST['submit_photo'])) {

		require_once INCLUDES."photo_functions_include.php";

		$error = "";

		$submit_info['photo_title'] = stripinput($_POST['photo_title']);

		$submit_info['photo_description'] = stripinput($_POST['photo_description']);

		$submit_info['album_id'] = isNum($_POST['album_id']) ? $_POST['album_id'] : "0";

		$submit_info['wojewodztwo'] = stripinput($_POST['wojewodztwo']);

		$submit_info['powiat'] = stripinput($_POST['powiat']);

		$submit_info['miejscowosc'] = stripinput($_POST['miejscowosc']);

		$submit_info['slowa_kluczowe'] = stripinput($_POST['slowa_kluczowe']);

		if (is_uploaded_file($_FILES['photo_pic_file']['tmp_name'])) {

			$photo_types = array(".gif",".jpg",".jpeg",".png");

			$photo_pic = $_FILES['photo_pic_file'];

			$photo_name = strtolower(substr($photo_pic['name'], 0, strrpos($photo_pic['name'], ".")));

			$photo_ext = strtolower(strrchr($photo_pic['name'],"."));

			$photo_dest = PHOTOS."submissions/";

			if (!preg_match("/^[-0-9A-Z_\[\]]+$/i", $photo_name)) {

				$error = 1;

			} elseif ($photo_pic['size'] > $settings['photo_max_b']){

				$error = 2;

			} elseif (!in_array($photo_ext, $photo_types)) {

				$error = 3;

			} else {

				$photo_file = image_exists($photo_dest, $photo_name.$photo_ext);

				move_uploaded_file($photo_pic['tmp_name'], $photo_dest.$photo_file);

				chmod($photo_dest.$photo_file, 0644);

				$imagefile = @getimagesize($photo_dest.$photo_file);

				if (!verify_image($photo_dest.$photo_file)) {

					$error = 3;

					unlink($photo_dest.$photo_file);

				} elseif ($imagefile[0] > $settings['photo_max_w'] || $imagefile[1] > $settings['photo_max_h']) {

					$error = 4;

					unlink($photo_dest.$photo_file);

				} else {

					$submit_info['photo_file'] = $photo_file;

				}

			}

		}

		opentable($locale['570']);

		if (!$error) {

			$result = dbquery("INSERT INTO ".$db_prefix."submissions (submit_type, submit_user, submit_datestamp, submit_criteria) VALUES ('p', '".$userdata['user_id']."', '".time()."', '".serialize($submit_info)."')");

			echo "<center><br>\n".$locale['580']."<br><br>

<a href='submit.php?stype=p'>".$locale['581']."</a><br><br>

<a href='index.php'>".$locale['412']."</a><br><br>\n</center>\n";

		} else {

			echo "<center><br>\n".$locale['600']."<br><br>\n";

			if ($error == 1) { $message .= $locale['601']; }

			elseif ($error == 2) { $message .= sprintf($locale['602'], $settings['photo_max_b']); }

			elseif ($error == 3) { $message .= $locale['603']; }

			elseif ($error == 4) { $message .= sprintf($locale['604'], $settings['photo_max_w'], $settings['photo_max_h']); }

			echo "<br><br>\n<a href='submit.php?stype=p'>".$locale['411']."</a><br><br>\n</center>\n";

		}

		closetable();

	} else {

		$opts = "";

		opentable($locale['570']);

		$result = dbquery("SELECT * FROM ".$db_prefix."photo_albums ORDER BY album_title");

		if (dbrows($result)) {

			while ($data = dbarray($result)) $opts .= "<option value='".$data['album_id']."'>".$data['album_title']."</option>\n";

			echo $locale['620']."<br><br>

<form name='inputform' method='post' action='".FUSION_SELF."?stype=p' enctype='multipart/form-data' onSubmit='return validatePhoto(this);'>

<table align='center' cellpadding='0' cellspacing='0'>

<tr>

<td class='tbl'><span style='color:#ff0000'>*</span> ".$locale['621']."</td>

<td class='tbl'><input type='text' name='photo_title' maxlength='100' class='textbox' style='width:250px;'></td>

</tr>";



$result = dbquery("

SELECT * FROM ".$db_prefix."photo_albums WHERE ".groupaccess('album_access')."

UNION

SELECT * FROM ".$db_prefix."photo_albums2 WHERE ".groupaccess('album_access')."

UNION

SELECT * FROM ".$db_prefix."photo_albums3 WHERE ".groupaccess('album_access')."

UNION

SELECT * FROM ".$db_prefix."photo_albums4 WHERE ".groupaccess('album_access')."

UNION

SELECT * FROM ".$db_prefix."photo_albums5 WHERE ".groupaccess('album_access')."

UNION

SELECT * FROM ".$db_prefix."photo_albums6 WHERE ".groupaccess('album_access')."

UNION

SELECT * FROM ".$db_prefix."photo_albums7 WHERE ".groupaccess('album_access')."

UNION

SELECT * FROM ".$db_prefix."photo_albums8 WHERE ".groupaccess('album_access')."

");

$link = ""; $sel = "";

while ($data = dbarray($result)) {

if (isset($site_links)) $sel = ($site_links == $data['album_id'] ? " selected" : "");

$link .= "<option value='".$data['album_id']."'$sel>".$data['album_title']."</option>\n";

} 



echo "

<tr>

<td valign='top' class='tbl'><span style='color:#ff0000'>*</span> Album</td>

<td class='tbl'><select name='album_id' class='textbox' style='width:250px;'>

$link</select></td>

</tr>







<tr>

<td valign='top' class='tbl'><span style='color:#ff0000'>*</span> Województwo</td>

<td class='tbl'><input type='text' name='wojewodztwo' maxlength='100' class='textbox' style='width:250px;'></td>

</tr>



<tr>

<td valign='top' class='tbl'><span style='color:#ff0000'>*</span> Powiat</td>

<td class='tbl'><input type='text' name='powiat' maxlength='100' class='textbox' style='width:250px;'></td>

</tr>



<tr>

<td valign='top' class='tbl'><span style='color:#ff0000'>*</span> Miejscowo&#182;&#230;</td>

<td class='tbl'><input type='text' name='miejscowosc' maxlength='100' class='textbox' style='width:250px;'></td>

</tr>



<tr>

<td valign='top' class='tbl'><span style='color:#ff0000'>*</span> S&#179;owa kluczowe</td>

<td class='tbl'><input type='text' name='slowa_kluczowe' maxlength='100' class='textbox' style='width:250px;'></td>

</tr>



<tr>

<td valign='top' class='tbl'><span style='color:#ff0000'>*</span> ".$locale['622']."</td>

<td class='tbl'><textarea name='photo_description' rows='8' class='textbox' style='width:500px;'></textarea>

<br>

<input type='button' value='b' class='button' style='font-weight:bold;width:25px;' onClick=\"addText('photo_description', '[b]', '[/b]');\">

<input type='button' value='i' class='button' style='font-style:italic;width:25px;' onClick=\"addText('photo_description', '[i]', '[/i]');\">

<input type='button' value='u' class='button' style='text-decoration:underline;width:25px;' onClick=\"addText('photo_description', '[u]', '[/u]');\">

<input type='button' value='center' class='button' style='width:45px;' onClick=\"addText('photo_description', '[center]', '[/center]');\">

<input type='button' value='quote' class='button' style='width:40px;' onClick=\"addText('photo_description', '[quote]', '[/quote]');\">

<input type='button' value='small' class='button' style='width:40px;' 

onClick=\"addText('photo_description', '[small]', '[/small]');\"> 

</td>

</tr>

<tr>

<td valign='top' class='tbl'><span style='color:#ff0000'>*</span> ".$locale['623']."</td>

<td class='tbl'><input type='file' name='photo_pic_file' class='textbox' style='width:250px;'><br>

<span class='small2'>".sprintf($locale['624'], parsebytesize($settings['photo_max_b']), $settings['photo_max_w'], $settings['photo_max_h'])."</span></td>

</tr>

<tr>

<td align='center' colspan='2' class='tbl'><br>

<input type='submit' name='submit_photo' value='".$locale['626']."' class='button'>

</td>

</tr>

</table>

</form>\n";

		} else {

			echo "<center><br>\n".$locale['591']."<br><br>\n</center>\n";

		}

		closetable();

	}

}

echo "<script type='text/javascript'>

function validateLink(frm) {

	if (frm.link_name.value==\"\" || frm.link_name.value==\"\" || frm.link_description.value==\"\") {

		alert(\"".$locale['590']."\"); return false;

	}

}

function validateNews(frm) {

	if (frm.news_subject.value==\"\" || frm.news_body.value==\"\") {

		alert(\"".$locale['590']."\"); return false;

	}















}

function validateArticle(frm) {

	if (frm.article_subject.value==\"\" || frm.article_snippet.value==\"\" || frm.article_body.value==\"\") {

		alert(\"".$locale['590']."\");

		return false;

	}

}

function validatePhoto(frm) {

	if (frm.photo_title.value==\"\" || frm.photo_description.value==\"\" || frm.photo_pic_file.value==\"\" || frm.album_id.value==\"\" || frm.wojewodztwo.value==\"\" || frm.powiat.value==\"\" || frm.miejscowosc.value==\"\" || frm.slowa_kluczowe.value==\"\") {

		alert(\"".$locale['590']."\");

		return false;

	}

}

</script>\n";



require_once "side_right.php";

require_once "footer.php";

?>