.-.-.-.-.-

<?php
session_start();
include('../connection.php');
include('../function_lib.php');
include('imageresize.php');
$uid = $_SESSION['userid'];
if (!isset($_POST['help_id'])){
    redirect("./index.php");
    die();
}
$help_id = $_POST['help_id'];
$subject = mysqli_real_escape_string($connection,$_POST['subject']);
$message = mysqli_real_escape_string($connection,$_POST['message']);

$result = mysqli_query($connection,"SELECT * FROM help WHERE help_id='".$help_id."'");
if(mysqli_num_rows($result)>0){
    $row = mysqli_fetch_object($result);
    
    if($row->give_uid==$uid){
        $receiver = $row->receive_uid;
    }
    elseif($row->receive_uid==$uid){
        $receiver = $row->give_uid;
    }
    else{
        redirect("./index.php");
    }

if($_FILES['receipt']['name']==''){
        
        mysqli_query($connection,"INSERT INTO `bank_receipt` (help_id, sender, receiver, subject, message, datetime) VALUES('".$help_id."','".$uid."','".$receiver."','".$subject."','".$message."','".date('Y-m-d H:i:s')."')");
        
        setMessage('Message send successfully.', 'alert-msg success');
        redirect("./messages.php?help_id=$help_id");
    }
    elseif(!empty($_FILES['receipt']) && !empty($_POST)){
        if(isset($_FILES['receipt']['name']) && array_search($_FILES['receipt']['type'],array("image/gif", "image/jpeg" , "image/png" ,"image/jpg") ) !== FALSE){
            $resize = new resizeImage();
            // upload image in three dimesions

//$largePath      = "uploads/news/large/";
            //$largeImage     = $resize->do_resize(500,400  ,$_FILES['receipt'],$largePath,0,"large");

$smallPath      = "uploads/";
            $smallImage     = $resize->do_resize(400,800  ,$_FILES['receipt'],$smallPath,0,"thumb", 90);
            
            mysqli_query($connection,"INSERT INTO `bank_receipt` (help_id, sender, receiver, subject, message, datetime, filename) VALUES('".$help_id."','".$uid."','".$receiver."','".$subject."','".$message."','".date('Y-m-d H:i:s')."','".$smallImage."')");
            
            setMessage('Message send successfully.', 'alert-msg success');
            redirect("./messages.php?help_id=$help_id");
        }
        else{
            // uploaded file is not a image
            setMessage('Uploaded file is not a image.', 'alert-msg error');
            redirect("./messages.php?help_id=$help_id");
        }
    }
}
else{
    redirect('./index.php');
}
?>

/home2/wtmwscom/public_html/themes1582.wtmwebshop.com/../member/messages_model.php