UPLOAD

if($action=="pridat"){

if(isset($_POST['pridat'])){

$sprava = NULL;

if (empty($_POST['sekcia'])) {
$s = FALSE;
$sprava .= 'Nevybral si sekciu pre tento subor!<br>';
} else {
$s = $_POST['sekcia'];
}

if($s){
$vysledok2 = mysql_query("INSERT INTO download VALUES('', '".$_SESSION['mid']."', '".time()."', '".$_POST['sekcia']."', '".$_FILES['naserver']['name']."', '".$_FILES['naserver']['type']."', '".$_FILES['naserver']['size']."', '0')");
}

if($vysledok2){

$pripona = explode ('.', $_FILES['naserver']['name']);
$id_prenosu = mysql_insert_id();
$subor = $id_prenosu. '.'. $pripona[1];

if($_POST['sekcia']==1){$priecinok='dokumenty';}
elseif($_POST['sekcia']==1){$priecinok='hudba';}
elseif($_POST['sekcia']==1){$priecinok='videa';}
else{$priecinok='obrazky';}

if(move_uploaded_file($_FILES['naserver']['tmp_name'], "../download/$priecinok/$subor")){
echo'<p><b>Subor bol uspesne ulozeny.</b></p>';
}else{
$sprava .= '<p>Subor sa nepodarilo ulozit!</p>';

$vysledok3 = mysql_query("DELETE FROM download WHERE id = '".$id_prenosu."'");
}
}
if(isset($sprava)){echo'<font color="red"><b>'.$sprava.'</b></font>';}
}

echo'
<table cellspacing="0" border="0">
<form enctype="multipart/form-data" action="?site=download&amp;action=pridat" method="post">
<input type="hidden" nem="MAX_FILE_SIZE" value="99999999999">
  <tr>
    <td width="80px"><b>Subor:</b></td>
    <td><input type="file" name="naserver" style="height: 18px;"></td>
  </tr>
  <tr>
    <td><b>Sekcia:</b></td>
    <td><select name="sekcia" style="width: 135px;">
        <option value="0">---Vyber---</option>
        <option value="1">Dokumenty</option>
        <option value="2">Hudba</option>
        <option value="3">Videa</option>
        <option value="4">Obrazky</option>
        </select></td>
  </tr>
  <tr>
    <td> </td>
    <td><input type="submit" name="pridat" value="Pridat"></td>
  </tr>
</form>
</table>
';