$file_name_to_add = $in{up_banner};
$file_name_to_add =~ s/%([A-Fa-f0-9]{2})/pack("c",hex($1))/ge;
$ctype = $in{up_banner};
$ctypeb = $in{up_banner};
if ($ctype =~ /([^\/\\]+)$/) {#check if it as \ and / for valid path;
$file_name_to_add = $1;
$file_name_to_add =~ s/^\.+//; #remove the unwanted / or \
}
# Check for File Extensions... (I'm renaming the uploaded
# file to a database name that I've retrieved and stored
# in the variable $record_id
if ($file_name_to_add =~ m/\.gif$/i) {
$file_ext = ".gif";
} elsif ($file_name_to_add =~ m/\.jpg$/i) {
$file_ext = ".jpg";
} elsif ($file_name_to_add =~ m/\.jpeg$/i) {
$file_ext = ".jpg";
} elsif ($file_name_to_add =~ m/\.png$/i) {
$file_ext = ".png";
} else {
$file_ext = ".gif"; # Default
}
$record_id .= $file_ext; # Append with the extension.
open(OUT,">/home/user/dir/aff/pics/$record_id") or error("Can't open outfile (/home/user/dir/aff/pics/$record_id) for writing: $!");
$flen = 0;
while (read($ctypeb,$i,1024))
{
print OUT $i;
$flen = $flen + 1024;
}
close(OUT);
$page_content .= qq~ Length: ,$flen/1024,Kb
\n
File was saved as $record_id!
\n
~;