// upload file
if (isset($_POST['submit_file'])) {
$directory = ($_GET['t'] == 'file' ? 'files/'. $settings['filesdir'] .'/' : 'files/image/'); // directory where to upload
$file_name = $_FILES['upload_file']['name'];

// make sure we have unique file name
while (file_exists($directory . $file_name))
$file_name = substr(md5(uniqid(rand())), 0, 2) . $file_name;

// upload
if (move_uploaded_file($_FILES['upload_file']['tmp_name'], $directory . $file_name))
$txt['error'] = $lang['file_uploaded'] .'
<script type="text/javascript">
window.opener.document.getElementById("'. $_GET['t'] .'").value = \''. $file_name .'\';
window.opener.document.getElementById("'. $_GET['t'] .'").focus();
setTimeout("window.close();", 1000);
</script>'; // yay!!! file uploaded
else
$txt['error'] = $lang['not_upload']; // something went wrong
}

load_template('upload', 2);
break;
case 'comments':
$file_id = (int) $_GET['f']; // file id