hey m8s...
I am using this script in ma Wapdesire gallery I know its too old but I am beginner!
	
But problem isn't here..
here is the big problem or maybe my mystake...
	
After selecting any file if user clicks on upload tab...
It shows an error like....
Warning: include(class.upload.php) [function.include]: failed to open stream: No such file or directory in /home/htdocs/pics/upload.php on line 11
Warning: include() [function.include]: Failed opening 'class.upload.php' for inclusion (include_path='.') in /home/htdocs/pics/upload.php on line 11
Warning: include(core.php) [function.include]: failed to open stream: No such file or directory in /home/htdocs/pics/upload.php on line 12
Warning: include() [function.include]: Failed opening 'core.php' for inclusion (include_path='.') in /home/htdocs/pics/upload.php on line 12
Warning: include(config.php) [function.include]: failed to open stream: No such file or directory in /home/htdocs/pics/upload.php on line 13
Warning: include() [function.include]: Failed opening 'config.php' for inclusion (include_path='.') in /home/htdocs/pics/upload.php on line 13
 
Fatal error: Call to undefined function connectdb() in /home/htdocs/pics/upload.php on line 26
Added after 9 minutes:
Please m8s fix it or attach any secure gallery script, I want to save ma site from session hackers....
					I am using this script in ma Wapdesire gallery I know its too old but I am beginner!
PHP Code:
	
	
<?php
header("Cache-Control: no-cache, must-revalidate");
header("Pragma: no-cache");
//header('Content-type: application/vnd.wap.xhtml+xml'); 
echo "<?xml version=\"1.0\"?>";
echo "<!DOCTYPE html PUBLIC \"-//WAPFORUM//DTD XHTML Mobile 1.0//EN\" \"http://www.wapforum.org/DTD/xhtml-mobile10.dtd\">";
?>
<html xmlns="http://www.w3.org/1999/xhtml">
<?php
include("../web/config.php");
include("../web/core.php");
connectdb();
$action = ($_GET["action"]);
$sid = ($_GET["sid"]);
$page = ($_GET["page"]);
$who = ($_GET["who"]);
$pmid = ($_GET["pmid"]);
$uid = getuid_sid($sid);
$sitename = mysql_fetch_array(mysql_query("SELECT value FROM ibwf_settings WHERE name='sitename'"));
$sitename = $sitename[0];
$theme = mysql_fetch_array(mysql_query("SELECT theme FROM ibwf_users WHERE id='".$uid."'"));
$lastloc=$_GET["lstloc"];
if($lastloc=="cht"){
   $rid= mysql_real_escape_string($_GET["rid"]);
    $rooms = mysql_fetch_array(mysql_query("SELECT id, name FROM ibwf_rooms WHERE id='".$rid."'"));
    $rname = $rooms[1];
}
if(islogged($sid)==false)
{
      echo "<head>";
      echo "<title>Error!!!</title>";
      echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/white_medium.css\">";
      echo "</head>";
      echo "<body>";
      echo "<p align=\"center\">";
      echo "You are not logged in<br/>";
      echo "Or Your session has been expired<br/><br/>";
      echo "<a href=\"index.php\">Login</a>";
      echo "</p>";
      echo "</body>";
      echo "</html>";
      exit();
}
$uid = getuid_sid($sid);
if(isbanned($uid))
    {
      echo "<head>";
      echo "<title>Error!!!</title>";
      echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
      echo "</head>";
      echo "<body>";
      echo "<p align=\"center\">";
      echo "<img src=\"../images/notok.gif\" alt=\"x\"/><br/>";
      echo "<b>You are Banned</b><br/><br/>";
      $banto = mysql_fetch_array(mysql_query("SELECT timeto, pnreas, exid FROM ibwf_penalties WHERE uid='".$uid."' AND penalty='1' OR uid='".$uid."' AND penalty='2'"));
   $banres = mysql_fetch_array(mysql_query("SELECT lastpnreas FROM ibwf_users WHERE id='".$uid."'"));
      $remain = $banto[0]- time();
      $rmsg = gettimemsg($remain);
      echo "<b>Time Left: </b>$rmsg<br/>";
      $nick = getnick_uid($banto[2]);
   echo "<b>By: </b>$nick<br/>";
   echo "<b>Reason: </b>$banto[1]";
      //echo "<a href=\"index.php\">Login</a>";
      echo "</p>";
      echo "</body>";
      echo "</html>";
      exit();
    }
    ///////////////////////////////////Extra menu
    if ($action == "main") {
        addonline(getuid_sid($sid), "User Gallery", "");
        echo "<head>";
        echo "<title>User Gallery</title>";
        echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
        echo "</head>";
        echo "<body>";
        echo "<div align=\"center\">";
            echo "Photo Gallery<br/>";
  $random = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery ORDER BY RAND() LIMIT 1"));
 
  $rando = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery ORDER BY RAND() LIMIT 1"));
 
  $rand = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery ORDER BY RAND() LIMIT 1"));
  $ran = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery ORDER BY RAND() LIMIT 1"));
  $ra = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery ORDER BY RAND() LIMIT 1"));
  echo "<img src=\"thumb.php?image=../pics/$random[1]&w=37&h=37&type=jpg\" alt=\"$random[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rando[1]&w=37&h=37&type=jpg\" alt=\"$rando[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rand[1]&w=37&h=37&type=jpg\" alt=\"$rand[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ran[1]&w=37&h=37&type=jpg\" alt=\"$ran[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ra[1]&w=37&h=37&type=jpg\" alt=\"$ra[0]\"/>";
  
  echo "</div>";
            echo "<div>";
        $males = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex='M'"));
        echo "<img src=\"../images/male.gif\" alt=\"\"/> <a href=\"index.php?action=male&sid=$sid\">Male Gallery</a> ($males[0])<br/>";
        $females = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex='F'"));
        echo "<img src=\"../images/female.gif\" alt=\"\"/> <a href=\"index.php?action=female&sid=$sid\">Female Gallery</a> ($females[0])<br/>";
        $un = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex=''"));
        echo "<img src=\"../images/female.gif\" alt=\"\"/> <a href=\"index.php?action=unknow&sid=$sid\">Unknow Gender</a> ($un[0])<br/>";
        echo "</div>";
        echo "<div align=center>";
              $me = getuid_sid($sid);
        echo "<img src=\"../images/images1.gif\" alt=\"*\"/> <a href=\"gallery2.php?action=main&who=$me&sid=$sid\">My Album</a><br/>";
        echo "<img src=\"../images/addfoto.gif\" alt=\"*\"/> <a href=\"index.php?action=upload&sid=$sid\">Upload Photo</a>";
        echo "</div><div align=\"center\">";
            echo "<a href=\"index.php?action=main&sid=$sid\">©$sitename</a>";    
        echo "</div>";
        echo "</body>";
    }
    else if($action == "male") {
        addonline(getuid_sid($sid), "Viewing Male Gallery", "");
        $uid = getuid_sid($sid);
        echo "<head>";
        echo "<title>Male Gallery</title>";
        echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
        echo "</head>";
        echo "<body>";
  echo "<div align=\"center\">";  
  echo "<b><i>Male Gallery</i></b><br/>";
  $random = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='M' ORDER BY RAND() LIMIT 1"));
 
  $rando = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='M' ORDER BY RAND() LIMIT 1"));
 
  $rand = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='M' ORDER BY RAND() LIMIT 1"));
  $ran = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='M' ORDER BY RAND() LIMIT 1"));
  $ra = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='M' ORDER BY RAND() LIMIT 1"));
  echo "<img src=\"thumb.php?image=../pics/$random[1]&w=37&h=37&type=jpg\" alt=\"$random[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rando[1]&w=37&h=37&type=jpg\" alt=\"$rando[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rand[1]&w=37&h=37&type=jpg\" alt=\"$rand[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ran[1]&w=37&h=37&type=jpg\" alt=\"$ran[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ra[1]&w=37&h=37&type=jpg\" alt=\"$ra[0]\"/>";
  
  echo "</div>";
        //////ALL gallery SCRIPT <<
        if ($page == "" || $page <= 0)$page = 1;
        if ($who != "") {
            $noi = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex='M'"));
        } else {
            $noi = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex='M'"));
        }
        $num_items = $noi[0]; //changable
        $items_per_page = 5;
        $num_pages = ceil($num_items/$items_per_page);
        if (($page > $num_pages) && $page != 1)$page = $num_pages;
        $limit_start = ($page-1) * $items_per_page;
        $sql = "SELECT DISTINCT uid FROM ibwf_gallery WHERE sex='M' ORDER BY uid ASC LIMIT $limit_start, $items_per_page";
            echo "<div>";
        $items = mysql_query($sql);
        echo mysql_error();
        if (mysql_num_rows($items) > 0) {
            while ($item = mysql_fetch_array($items)) {
                $who = $item[0];
                $user = getnick_uid($who);
                $countpics = mysql_fetch_array(mysql_query("SELECT COUNT(id) FROM ibwf_gallery WHERE uid='".$who."'"));
                $lnk = "» <a href=\"gallery2.php?action=main&who=$who&sid=$sid\">$user</a>($countpics[0])<br/>";
                echo "$lnk";
            }
        echo "<p align=center>";
        }
        if ($page > 1) {
            $ppage = $page-1;
            echo "<a href=\"index.php?action=$action&page=$ppage&sid=$sid\">«PREV</a> ";
        }
        if ($page < $num_pages) {
            $npage = $page+1;
            echo "<a href=\"index.php?action=$action&page=$npage&sid=$sid\">Next»</a>";
        }
        echo "<br/>$page/$num_pages<br/>";
        if ($num_pages > 2) {
            $rets = "<form action=\"index.php\" method=\"get\">";
            $rets .= "Jump to page<input name=\"page\" format=\"*N\" size=\"3\"/>";
            $rets .= "<input type=\"submit\" value=\"GO\"/>";
            $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\"/>";
            $rets .= "<input type=\"hidden\" name=\"sid\" value=\"$sid\"/>";
            $rets .= "</form>";
            echo $rets;
        }
        echo "</p>";
        echo "</div>";
        echo "<div align=center>";
        echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
            echo "<a href=\"index.php?action=main&sid=$sid\">© $sitename</a>";
        echo "</div>";
        echo "</body>";
    }
    else if($action == "female") {
        addonline(getuid_sid($sid), "Viewing Female Gallery", "");
        $uid = getuid_sid($sid);
        echo "<head>";
        echo "<title>Female GalleRy</title>";
        echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
        echo "</head>";
        echo "<body>";
  echo "<div align=\"center\">";  
  echo "<b><i>FeMale Gallery</i></b><br/>";
  $random = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='F' ORDER BY RAND() LIMIT 1"));
 
  $rando = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='F' ORDER BY RAND() LIMIT 1"));
 
  $rand = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='F' ORDER BY RAND() LIMIT 1"));
  $ran = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='F' ORDER BY RAND() LIMIT 1"));
  $ra = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='F' ORDER BY RAND() LIMIT 1"));
  echo "<img src=\"thumb.php?image=../pics/$random[1]&w=37&h=37&type=jpg\" alt=\"$random[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rando[1]&w=37&h=37&type=jpg\" alt=\"$rando[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rand[1]&w=37&h=37&type=jpg\" alt=\"$rand[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ran[1]&w=37&h=37&type=jpg\" alt=\"$ran[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ra[1]&w=37&h=37&type=jpg\" alt=\"$ra[0]\"/>";
  
  echo "</div>";
  echo "<div>";
        //////ALL gallery SCRIPT <<
        if ($page == "" || $page <= 0)$page = 1;
        if ($who != "") {
            $noi = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex='F'"));
        } else {
            $noi = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex='F'"));
        }
        $num_items = $noi[0]; //changable
        $items_per_page = 5;
        $num_pages = ceil($num_items/$items_per_page);
        if (($page > $num_pages) && $page != 1)$page = $num_pages;
        $limit_start = ($page-1) * $items_per_page;
        $sql = "SELECT DISTINCT uid FROM ibwf_gallery WHERE sex='F' ORDER BY uid ASC LIMIT $limit_start, $items_per_page";
        $items = mysql_query($sql);
        echo mysql_error();
        if (mysql_num_rows($items) > 0) {
            while ($item = mysql_fetch_array($items)) {
                $who = $item[0];
                $user = getnick_uid($who);
                $countpics = mysql_fetch_array(mysql_query("SELECT COUNT(id) FROM ibwf_gallery WHERE uid='".$who."'"));
                $lnk = "» <a href=\"gallery2.php?action=main&who=$who&sid=$sid\">$user($countpics[0])</a><br/>";
                echo "$lnk";
            }
        } else {
            echo "female gallery is empty";
        }
        echo "<p align=center>";
        if ($page > 1) {
            $ppage = $page-1;
            echo "<a href=\"index.php?action=$action&page=$ppage&sid=$sid\">«PREV</a> ";
        }
        if ($page < $num_pages) {
            $npage = $page+1;
            echo "<a href=\"index.php?action=$action&page=$npage&sid=$sid\">Next»</a>";
        }
        echo "<br/>$page/$num_pages<br/>";
        if ($num_pages > 2) {
            $rets = "<form action=\"index.php\" method=\"get\">";
            $rets .= "Jump to page<input name=\"page\" format=\"*N\" size=\"3\"/>";
            $rets .= "<input type=\"submit\" value=\"GO\"/>";
            $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\"/>";
            $rets .= "<input type=\"hidden\" name=\"sid\" value=\"$sid\"/>";
            $rets .= "</form>";
            echo $rets;
        }
        echo "</p>";
        echo "</div>";
        echo "<div align=center>";
        echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
            echo "<a href=\"index.php?action=main&sid=$sid\">© $sitename</a>";
        echo "</div>";
        echo "</body>";
    }
    else if($action == "unknow") {
        addonline(getuid_sid($sid), "Viewing Uknow Gallery", "");
        $uid = getuid_sid($sid);
        echo "<head>";
        echo "<title>User Gallery</title>";
        echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
        echo "</head>";
        echo "<body>";
  echo "<div align=\"center\">";  
  echo "<b><i>Unknow Gender Gallery</i></b></div>";
  $random = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='' ORDER BY RAND() LIMIT 1"));
 
  $rando = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='' ORDER BY RAND() LIMIT 1"));
 
  $rand = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='' ORDER BY RAND() LIMIT 1"));
  $ran = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='' ORDER BY RAND() LIMIT 1"));
  $ra = mysql_fetch_array(mysql_query("SELECT id, filename FROM ibwf_gallery WHERE sex='' ORDER BY RAND() LIMIT 1"));
  echo "<p align=\"center\">";  
  echo "<img src=\"thumb.php?image=../pics/$random[1]&w=37&h=37&type=jpg\" alt=\"$random[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rando[1]&w=37&h=37&type=jpg\" alt=\"$rando[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$rand[1]&w=37&h=37&type=jpg\" alt=\"$rand[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ran[1]&w=37&h=37&type=jpg\" alt=\"$ran[0]\"/>";
  echo " <img src=\"thumb.php?image=../pics/$ra[1]&w=37&h=37&type=jpg\" alt=\"$ra[0]\"/>";
  
  echo "</p>";
        //////ALL gallery SCRIPT <<
        if ($page == "" || $page <= 0)$page = 1;
        if ($who != "") {
            $noi = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex=''"));
        } else {
            $noi = mysql_fetch_array(mysql_query("SELECT COUNT(DISTINCT uid) FROM ibwf_gallery WHERE sex=''"));
        }
        $num_items = $noi[0]; //changable
        $items_per_page = 5;
        $num_pages = ceil($num_items/$items_per_page);
        if (($page > $num_pages) && $page != 1)$page = $num_pages;
        $limit_start = ($page-1) * $items_per_page;
        $sql = "SELECT DISTINCT uid FROM ibwf_gallery WHERE sex='' ORDER BY uid ASC LIMIT $limit_start, $items_per_page";
        $items = mysql_query($sql);
        echo mysql_error();
        if (mysql_num_rows($items) > 0) {
            while ($item = mysql_fetch_array($items)) {
                $who = $item[0];
                $user = getnick_uid($who);
                $countpics = mysql_fetch_array(mysql_query("SELECT COUNT(id) FROM ibwf_gallery WHERE uid='".$who."'"));
                $lnk = "» <a href=\"gallery2.php?action=main&who=$who&sid=$sid\">$user($countpics[0])</a><br/>";
                echo "$lnk";
            }
        } else {
            echo "Female Gallery is empty";
        }
        echo "</p>";
        echo "<p align=\"center\">";
        if ($page > 1) {
            $ppage = $page-1;
            echo "<a href=\"index.php?action=$action&page=$ppage&sid=$sid\">«PREV</a> ";
        }
        if ($page < $num_pages) {
            $npage = $page+1;
            echo "<a href=\"index.php?action=$action&page=$npage&sid=$sid\">Next»</a>";
        }
        echo "<br/>$page/$num_pages<br/>";
        if ($num_pages > 2) {
            $rets = "<form action=\"index.php\" method=\"get\">";
            $rets .= "Jump to page<input name=\"page\" format=\"*N\" size=\"3\"/>";
            $rets .= "<input type=\"submit\" value=\"GO\"/>";
            $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\"/>";
            $rets .= "<input type=\"hidden\" name=\"sid\" value=\"$sid\"/>";
            $rets .= "</form>";
            echo $rets;
        }
        echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
            echo "<a href=\"index.php?action=main&sid=$sid\">© $sitename</a>";
        echo "</p>";
        echo "</body>";
    }
    else if($action == "comments") {
        $who = cleanQuery($_GET["who"]);
        $gid = cleanQuery($_GET["gid"]);
        addonline(getuid_sid($sid), "Viewing Photo Comments", "");
        $uid = getuid_sid($sid);
        //////ALL LISTS SCRIPT <<
        if ($page == "" || $page <= 0)$page = 1;
        $noi = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM ibwf_galcomments WHERE pid='".$gid."'"));
        $num_items = $noi[0]; //changable
        $items_per_page = 5;
        $num_pages = ceil($num_items/$items_per_page);
        if (($page > $num_pages) && $page != 1)$page = $num_pages;
        $limit_start = ($page-1) * $items_per_page;
        $sql = "SELECT id, pid, text, byuser, time FROM ibwf_galcomments WHERE pid='".$gid."' ORDER BY id DESC LIMIT $limit_start, $items_per_page";
        echo "<head>";
        echo "<title>User Gallery</title>";
        echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
        echo "</head>";
        echo "<body>";
        echo "<p>";
        $items = mysql_query($sql);
        echo mysql_error();
        if (mysql_num_rows($items) > 0) {
            while ($item = mysql_fetch_array($items)) {
                if (isonline($item[3])) {
                    $iml = "<img src=\"../images/onl.gif\" alt=\"+\"/>";
                } else {
                    $iml = "<img src=\"../images/ofl.gif\" alt=\"-\"/>";
                }
                $snick = getnick_uid($item[3]);
                $lnk = "<a href=\"index.php?action=viewuser&who=$item[3]&sid=$sid\">$iml$snick</a>:";
                $bs = date("d m y-H:i:s", $item[4]);
                echo "$lnk<br/><small>";
                $me = getuid_sid($sid);
                if ($who == "$me") {
                    $can = "a";
                } else {
                    $can = "b";
                }
                if (ismod($uid) || $can == "a") {
                    $delnk = "<a href=\"modproc.php?action=delcmt&sid=$sid&id=$item[0]\">[x]</a>";
                } else {
                    $delnk = "";
                }
                $text = parsepm($item[2], $sid);
                echo "$text $delnk<br/>";
                echo "$bs";
                echo "<br/>";
                echo "</small>";
            }
        }
        echo "</p>";
        echo "<p align=\"center\">";
        if ($page > 1) {
            $ppage = $page-1;
            echo "<a href=\"index.php?action=$action&page=$ppage&sid=$sid&who=$who&gid=$gid\">«PREV</a> ";
        }
        if ($page < $num_pages) {
            $npage = $page+1;
            echo "<a href=\"index.php?action=$action&page=$npage&sid=$sid&who=$who&gid=$gid\">Next»</a>";
        }
        echo "<br/>$page/$num_pages<br/>";
        if ($num_pages > 2) {
            $rets = "<form action=\"index.php\" method=\"get\">";
            $rets .= "Jump to page<input name=\"page\" format=\"*N\" size=\"3\"/>";
            $rets .= "<input type=\"submit\" value=\"GO\"/>";
            $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\"/>";
            $rets .= "<input type=\"hidden\" name=\"who\" value=\"$who\"/>";
            $rets .= "<input type=\"hidden\" name=\"sid\" value=\"$sid\"/>";
            $rets .= "<input type=\"hidden\" name=\"gid\" value=\"$gid\"/>";
            $rets .= "</form>";
            echo $rets;
        }
        echo "</p>";
        ////// UNTILL HERE >>
        echo "<p align=\"center\">";
        $me = getuid_sid($sid);
        if ($me != "$who") {
            echo "<a href=\"index.php?action=addcomment&sid=$sid&who=$who&gid=$gid\">Add Comment</a><br/>";
        }
        echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
            echo "<a href=\"index.php?action=main&sid=$sid\">© $sitename</a>";
        echo "</p>";
        echo "</body>";
    }
//////////////////////////////////////////Update photo
else if($action=="uphoto")
{
    addonline(getuid_sid($sid),"Updating Photo","");
    $dir = cleanQuery($_POST["dir"]);
    $usig = cleanQuery($_POST["usig"]);
    $gid = cleanQuery($_GET["gid"]);
      echo "<head>";
      echo "<title>$sitename</title>";
      echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
      echo "</head>";
      echo "<body>";
  echo "<p align=\"center\">";
  //$uid = getuid_sid($sid);
  $res = mysql_query("UPDATE ibwf_gallery SET dir='".$dir."', inpo='".$usig."' WHERE id='".$gid."'");
  if($res)
  {
    echo "<img src=\"../images/ok.gif\" alt=\"o\"/>Your Photo was updated successfully<br/>";
  }else{
    echo "<img src=\"../images/notok.gif\" alt=\"x\"/>Error updating your Photo<br/>";
  }
 echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
 echo "<a href=\"index.php?action=main&sid=$sid\">© $sitename</a>";
  echo "</p></body>";
}
else if($action=="upload")
{
   addonline(getuid_sid($sid),"Upload Foto","");
   echo "<head>";
   echo "<title>Uploading</title>";
   echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
   echo "</head>";
   echo "<body>";
   echo "<p align=\"center\">";
   echo "<b>Upload Photo</b><br/><br/>";
   echo "<form align=\"left\" action=\"upload.php?action=upload&sid=$sid\" method=\"post\" ENCTYPE=\"multipart/form-data\">";
   echo "<input type=\"file\" size=\"15\" name=\"my_field\" value=\"\" />";
   echo "<input type=\"hidden\" name=\"action\" value=\"image\" /><br/>";
   echo "<input type=\"submit\" name=\"Submit\" value=\"upload\" />";
   echo "</form>";
   echo "</p>"; 
   ////// UNTILL HERE >> 
   echo "<p align=\"center\">";
   echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
   echo "<a href=\"index.php?action=main&sid=$sid\">© $sitename</a>";
   echo "</p>";
   echo "</body>";
    }
    else if($action == "addcomment") {
        $who = cleanQuery($_GET["who"]);
        $gid = cleanQuery($_GET["gid"]);
        addonline(getuid_sid($sid), "Adding Photo Comments", "");
        $uid = getuid_sid($sid);
        $sql = "SELECT filename FROM ibwf_gallery  WHERE id='".$gid."'";
        echo "<head>";
        echo "<title>User Gallery</title>";
        echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../themes/$theme[0]\">";
        echo "</head>";
        echo "<body>";
        echo "<p align=\"center\">";
        $items = mysql_query($sql);
        echo mysql_error();
        if (mysql_num_rows($items) > 0) {
            while ($item = mysql_fetch_array($items)) {
                $img = $item[0];
                        $lnk = "<img src=\"thumb.php?image=../pics/$img&w=80&h=95&type=jpg\" alt=\"$id\"/><br/>";
                echo "$lnk";
                echo "<form action=\"genproc.php?action=commentadd&sid=$sid&gid=$gid\" method=\"post\">";
                $vb = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM ibwf_prate WHERE uid='".$uid."' AND pid='".$gid."'"));
                if ($vb[0] == 0) {
                    echo "Rate Photo: <select name=\"prate\">";
                    echo "<option value=\"1\">1</option>";
                    echo "<option value=\"2\">2</option>";
                    echo "<option value=\"3\">3</option>";
                    echo "<option value=\"4\">4</option>";
                    echo "<option value=\"5\">5</option>";
                    echo "<option value=\"6\">6</option>";
                    echo "<option value=\"7\">7</option>";
                    echo "<option value=\"8\">8</option>";
                    echo "<option value=\"9\">9</option>";
                    echo "<option value=\"10\">10</option>";
                    echo "</select><br/>";
                } else {
                    $rinfo = mysql_fetch_array(mysql_query("SELECT COUNT(*) as nofr, SUM(prate) as nofp FROM ibwf_prate WHERE pid='".$gid."'"));
                    $counts = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM ibwf_prate WHERE pid='".$gid."'"));
                    if ($counts[0] > 0) {
                        $ther = $rinfo[1]/$rinfo[0];
                        $rating = "Rating: $ther/$rinfo[1] (votes($counts[0]))<br/>";
                    } else {
                        $rating = "";
                    }
                    echo "$rating";
                }
                echo "Comment:<br/>";
                echo "<input type=\"text\" maxlength=\"150\" name=\"text\"/><br/>";
                echo "<input type=\"submit\" value=\"Add\"/>";
                echo "</form>";
            }
        }
        echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
            echo "<a href=\"index.php?action=main&sid=$sid\">© $sitename</a>";
        echo "</p>";
        echo "</body>";
    } else {
        addonline(getuid_sid($sid), "Lost in user Gallery lol", "");
        echo "<p align=\"center\">";
        echo "I don't know how did you get into here, but there's nothing to show<br/><br/>";
        echo "<a href=\"index.php?action=main&sid=$sid\">User Gallery</a><br/>";
        echo "<a href=\"index.php?action=main&sid=$sid\"><img src=\"../images/home.gif\" alt=\"*\"/>";
        echo "Home</a>";
        echo "</p>";
    }
    echo "</body>";
    echo "</html>";
?>
here is the big problem or maybe my mystake...
PHP Code:
	
	
<?php
header("Content-type: text/html; charset=ISO-8859-1");
echo "<?xml version=\"1.0\" encoding=\"ISO-8859-1\" ?>";
echo "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">";
?>
<?php
   include("class.upload.php");
   include("core.php");
   include("config.php");
   echo "<head>";
   echo "<title>$stitle</title>";
   echo "<link rel=\"StyleSheet\" type=\"text/css\" href=\"style/style.css\" />";
   echo "
      <meta http-equiv=\"Cache-Control\" content=\"must-revalidate\" />
      <meta http-equiv=\"Cache-Control\" content=\"no-cache\"/>
      <meta name=\"description\" content=\"ibwf mobile :)\">
      <meta name=\"keywords\" content=\"free, community, forums, chat, wap, communicate\">
      ";
   echo "</head>";
   echo "<body>";
   connectdb();
   $action = ($_GET["action"]);
   $sid = ($_GET["sid"]);
   $page = ($_GET["page"]);
   $who = ($_GET["who"]);
   $uid = getuid_sid($sid);
$theme = mysql_fetch_array(mysql_query("SELECT theme FROM ibwf_users WHERE id='".$uid."'"));
$sitename = mysql_fetch_array(mysql_query("SELECT value FROM ibwf_settings WHERE name='sitename'"));
$sitename = $sitename[0];
   
   $theme = mysql_fetch_array(mysql_query("SELECT theme FROM ibwf_users WHERE id='".$uid."'"));
   if (islogged($sid) == false) {
      echo "<p align=\"center\">";
      echo "You are not logged in<br/>";
      echo "Or Your session has been expired<br/><br/>";
      echo "<a href=\"index.php\">Login</a>";
      echo "</p>";
      exit();
   }
   $uid = getuid_sid($sid);
   if (isbanned($uid)) {
      echo "<p align=\"center\">";
      echo "<img src=\"../images/notok.gif\" alt=\"x\"/><br/>";
      echo "You are <b>Banned</b><br/>";
      $banto = mysql_fetch_array(mysql_query("SELECT timeto FROM ibwf_penalties WHERE uid='".$uid."' AND penalty='1'"));
      $remain = $banto[0]- time();
      $rmsg = gettimemsg($remain);
      echo "Time to finish your penalty: $rmsg<br/><br/>";
      //echo "<a href=\"index.php\">Login</a>";
      echo "</p>";
      exit();
   }
//////////////////////////////////Members List
error_reporting(E_ALL); 
$userinfo = mysql_fetch_array(mysql_query("SELECT name, sex FROM ibwf_users WHERE id='".$uid."'"));
$membername = $userinfo[0];
if ($_POST['action'] == 'image') {
      
      echo "<p align=\"center\">";
    $handle = new Upload($_FILES['my_field']);
    if ($handle->uploaded) {
        
        $handle->image_resize            = true;
        $handle->image_ratio_y           = true;
        $handle->image_x                 = 240;
        $handle->Process('../pics/');
        if ($handle->processed) {
            echo '  file uploaded with success<br/>';
            echo '  <img src="../pics/' . $handle->file_dst_name . '" /><br/>';
            $info = getimagesize($handle->file_dst_pathname);
            echo '  link to the file just uploaded: <a href="../pics/' . $handle->file_dst_name . '">' . $handle->file_dst_name . '</a><br/>';
            $imageurl = "../pics/$handle->file_dst_name";
            $avatarurl = "/pics/$handle->file_dst_name";
            $date=(date("D, j F Y"));
            $reg = mysql_query("INSERT INTO ibwf_gallery SET uid='".$uid."', itemurl='".$imageurl."', avatarurl='".$avatarurl."', date='".$date."', filename='" . $handle->file_dst_name . "', sex='".$userinfo[1]."'");
        } else {
            echo '  file not uploaded to the wanted location<br/>';
            echo '  Error: ' . $handle->error . '<br/>';
        }
        $handle-> Clean();
    } else {
        echo '  file not uploaded on the server<br/>';
        echo '  Error: ' . $handle->error . '';
    }
    
    echo "</p>"; 
  ////// UNTILL HERE >> 
    echo "<p align=\"center\">";
   echo "<br/><br/><a href=\"gallery.php?action=main&sid=$sid\">«Back to Gallery</a><br/>";
    echo "<a href=\"index.php?action=main&sid=$sid\">";
echo "© $sitename</a>";
  echo "</p></body>";
}
?>
</HTML>
It shows an error like....
Warning: include(class.upload.php) [function.include]: failed to open stream: No such file or directory in /home/htdocs/pics/upload.php on line 11
Warning: include() [function.include]: Failed opening 'class.upload.php' for inclusion (include_path='.') in /home/htdocs/pics/upload.php on line 11
Warning: include(core.php) [function.include]: failed to open stream: No such file or directory in /home/htdocs/pics/upload.php on line 12
Warning: include() [function.include]: Failed opening 'core.php' for inclusion (include_path='.') in /home/htdocs/pics/upload.php on line 12
Warning: include(config.php) [function.include]: failed to open stream: No such file or directory in /home/htdocs/pics/upload.php on line 13
Warning: include() [function.include]: Failed opening 'config.php' for inclusion (include_path='.') in /home/htdocs/pics/upload.php on line 13
Fatal error: Call to undefined function connectdb() in /home/htdocs/pics/upload.php on line 26
Added after 9 minutes:
Please m8s fix it or attach any secure gallery script, I want to save ma site from session hackers....

 Can Any One Fix It Please
									
									
									Can Any One Fix It Please
								
Comment