<?php

    // Required: anonymous function reference number as explained above.

    $funcNum = $_GET['CKEditorFuncNum'] ;

    // Optional: instance name (might be used to load a specific configuration file or anything else).

    $CKEditor = $_GET['CKEditor'] ;

    // Optional: might be used to provide localized messages.

    $langCode = $_GET['langCode'] ;

    // Check the $_FILES array and save the file. Assign the correct path to a variable ($url).

    $url = '/path/to/uploaded/file.ext';

    // Usually you will only assign something here if the file could not be uploaded.

    $message = ;

    echo "<script type='text/javascript'>window.parent.CKEDITOR.tools.callFunction($funcNum, '$url', '$message');</script>";

?>

<?php

$url = 'images/uploads/'.time()."_".$_FILES['upload']['name'];

/*

$move = @ move_uploaded_file($_FILES['upload']['tmp_name'], $url);

$funcNum = $_GET['CKEditorFuncNum'] ;

echo "<script type='text/javascript'>window.parent.CKEDITOR.tools.callFunction($funcNum, '$url', '$message');</script>";

*/

 //extensive suitability check before doing anything with the file...

    if (($_FILES['upload'] == "none") ||(empty($_FILES['upload']['name'])) )

    {

       $message = "No file uploaded.";

    }

    else if ($_FILES['upload']["size"] == 0)

    {

       $message = "The file is of zero length.";

    }

    else if (($_FILES['upload']["type"] != "image/pjpeg") && ($_FILES['upload']["type"] != "image/jpeg") && ($_FILES['upload']["type"] != "image/png")&&($_FILES['upload']["type"] != "image/gif"))

    {

       $message = "图片格式必须是jpg/gif/png";

    }

    else if (!is_uploaded_file($_FILES['upload']["tmp_name"]))

    {

       $message = "You may be attempting to hack our server. We're on to you; expect a knock on the door sometime soon.";

    }

    else {

      $message = "";

      $move = @ move_uploaded_file($_FILES['upload']['tmp_name'], $url);

      if(!$move)

      {

         $message = "Error moving uploaded file. Check the script is granted Read/Write/Modify permissions.";

      }

      //$url=$url;

    }

$funcNum = $_GET['CKEditorFuncNum'] ;

echo "<script type='text/javascript'>window.parent.CKEDITOR.tools.callFunction($funcNum, '$url', '$message');</script>";

?>