Pokemon Data Entry

[insert_php]
//require_once(‘/wp-config.php’);

//eel need to determine if user POSTED and if so then do db action, otherwise don’t

global $wpdb;

$user = wp_get_current_user();
$theUserID = $user->data->ID;
if($theUserID == 1)// only I can upload data!
{
if(isset($_POST[“submit”]))
{
$theType = $_POST[‘poketype’];
$theID = $_POST[‘pokeid’];
$theName = $_POST[‘pokename’];
$theRarity = $_POST[‘pokerarity’];

// code is 4 character type + 3 digit number like xyev008
$theLink = $wpdb->get_row(‘select * from monbase where type=’.$theType.’ and id=’.$theID);
if(is_null($theLink))
{
// insert it
$wpdb->insert(‘monbase’, array(‘id’ => $theID, ‘type’=>$theType, ‘name’=>$theName, ‘rarity’=>$theRarity));

$target_dir = “/home/dh_rxtumv/legendesque.com/pokemon/”.$theType.”/”;
//$target_file = $target_dir . basename($_FILES[“fileToUpload”][“name”]);
$base_name = $_FILES[“data_file”][“tmp_name”];
$theFormattedID = sprintf(“%03d”, $theID);
$target_file = $target_dir . $theFormattedID . “.jpg”;
$uploadOk = 1;
$imageFileType = pathinfo($target_file, PATHINFO_EXTENSION);
// Check if image file is a actual image or fake image
$check = getimagesize($_FILES[“datafile”][“tmp_name”]);
if($check !== false)
{
//echo “File is an image – ” . $check[“mime”] . “.”;
$uploadOk = 1;
}
else
{
echo “File is not an image.”;
$uploadOk = 0;
}
// Check if file already exists
if (file_exists($target_file))
{
echo “Sorry, file already exists.”;
$uploadOk = 0;
}
// Check file size
if ($_FILES[“datafile”][“size”] > 500000)
{
echo “Sorry, your file is too large.”;
$uploadOk = 0;
}
// Allow certain file formats
if($imageFileType != “jpg” && $imageFileType != “png” && $imageFileType != “jpeg”
&& $imageFileType != “gif” )
{
echo “Sorry, only JPG, JPEG, PNG & GIF files are allowed.”;
$uploadOk = 0;
}
// Check if $uploadOk is set to 0 by an error
if ($uploadOk == 0)
{
echo “Sorry, your file was not uploaded.”;
// if everything is ok, try to upload file
}
else
{
if (move_uploaded_file($_FILES[“datafile”][“tmp_name”], $target_file))
{
echo “The file “. basename( $_FILES[“datafile”][“name”]). ” has been uploaded.”;
}
else
{
echo “Sorry, there was an error uploading your file.”;
}
}
}
else
{
// tell the user this is a duplicate
echo “Sorry, this data already exists in the database”;
}
}
}
[/insert_php]

Series:
Rarity:

Number:

Name: