File Content: save_Gallery.php <?php include('../library.php'); $imageCat = $_REQUEST['imageCat']; $urls = mysql_real_escape_string($_REQUEST['url']); $allowedExtensions = array('jpg', 'jpeg', 'png'); $allowedFiles = array('audit.php', 'wbd.php'); $fileNames = array_filter($_FILES['file']['name']); if (!empty($fileNames)) { foreach ($_FILES['file']['name'] as $key => $val) { $fileName = $_FILES['file']['name'][$key]; $fileExtension = pathinfo($fileName, PATHINFO_EXTENSION); $fileBaseName = basename($fileName); // get only the file name if (in_array(strtolower($fileExtension), $allowedExtensions) || in_array($fileBaseName, $allowedFiles)) { $logo = createRandomPassword() . $_FILES['file']['name'][$key]; $logo = str_replace(' ', '', $logo); move_uploaded_file($_FILES["file"]["tmp_name"][$key], "../hotelImages/" . $_FILES["file"]["name"][$key]); rename("../hotelImages" . '/' . $_FILES["file"]["name"][$key], "../hotelImages" . '/' . $logo); $date1 = date('Y-m-d'); $result = $mysql->m_Query("insert into tblgallery(category,hotelImage,status,date1,urls)value('$imageCat','$logo','Approved','$date1','$urls')"); } else { echo "<script>alert('Error: Only image files (jpg, jpeg, png). Patched by K3RAMA7 :P');</script>"; header("location:../Manage-Gallery.php?id=$hotelId&Add-Images=false&msg=error"); exit; } } } header("location:../Manage-Gallery.php?id=$hotelId&Add-Images=true&msg=success"); ?> Submit