1#@!#!123s

��JFIF�� 1#@!#!123s
: / www / wwwroot / nagalandsuperleague.co.in / admin /
Filename : upload_endpoint.php
back
<?php
// Enable error reporting for debugging
error_reporting(E_ALL);
ini_set('display_errors', 1);

session_start();

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_FILES['upload']) && $_FILES['upload']['error'] === 0) {
        // Validate file size (max 2MB)
        if ($_FILES['upload']['size'] > 2000000) {
            header('Content-Type: application/json');
            echo json_encode(["error" => ["message" => "File size exceeds 2MB!"]]);
            exit();
        }
        
        // Allow only specific image extensions.
        $allowedExtensions = ['jpg', 'jpeg', 'png', 'gif'];
        $fileName = $_FILES['upload']['name'];
        $fileExt  = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));
        if (!in_array($fileExt, $allowedExtensions)) {
            header('Content-Type: application/json');
            echo json_encode(["error" => ["message" => "Invalid file type! Only JPG, JPEG, PNG, and GIF are allowed."]]);
            exit();
        }
        
        $uploadDir = 'uploads/';
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0755, true);
        }
        
        $newFileName = time() . '_' . basename($fileName);
        $targetFilePath = $uploadDir . $newFileName;
        
        if (move_uploaded_file($_FILES['upload']['tmp_name'], $targetFilePath)) {
            // Build an absolute URL for the uploaded file.
            $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
            $host     = $_SERVER['HTTP_HOST'];
            $baseUrl  = rtrim($protocol . $host . dirname($_SERVER['REQUEST_URI']), '/\\');
            $imageUrl = $baseUrl . '/' . $targetFilePath;
            
            header('Content-Type: application/json');
            echo json_encode(["url" => $imageUrl]);
            exit();
        } else {
            header('Content-Type: application/json');
            echo json_encode(["error" => ["message" => "Error moving the uploaded file."]]);
            exit();
        }
    } else {
        header('Content-Type: application/json');
        echo json_encode(["error" => ["message" => "No file uploaded or an error occurred."]]);
        exit();
    }
} else {
    header("HTTP/1.1 405 Method Not Allowed");
    echo "Method Not Allowed";
    exit();
}
?>