<?php
// ==============
// Configuration
// ==============
$uploaddir = "upload"; // Where you want the files to upload to - Important: Make sure this folders permissions is 0777!
$allowed_ext = "pdf"; // These are the allowed extensions of the files that are uploaded
$max_size = "5000000"; // 5000000 is the same as 5MB
$max_height = ""; // This is in pixels - Leave this field empty if you don't want to upload images
$max_width = ""; // This is in pixels - Leave this field empty if you don't want to upload images
// Check Entension
$extension = pathinfo($_FILES['file']['name']);
$extension = $extension[extension];
$allowed_paths = explode(", ", $allowed_ext);
for($i = 0; $i < count($allowed_paths); $i++) {
 if ($allowed_paths[$i] == "$extension") {
 $ok = "1";
 }
}

// Check File Size
if ($ok == "1") {
if($_FILES['file']['size'] > $max_size)
{
print "File size is too big!";
exit;
}

// Check Height & Width
if ($max_width && $max_height) {
list($width, $height, $type, $w) = getimagesize($_FILES['file']['tmp_name']);
if($width > $max_width || $height > $max_height)
{
print "File height and/or width are too big!";
exit;
}
}

// The Upload Part
if(is_uploaded_file($_FILES['file']['tmp_name']))
	{
	move_uploaded_file($_FILES['file']['tmp_name'],$uploaddir.'/'.$_FILES['file']['name']);
	}
	$con = mysql_connect(//Server info here........I blocked it out on purpose);
		if (!$con)
		  {
		  die('Could not connect: ' . mysql_error());
		  }
		  
		mysql_select_db("dougkeeling", $con);
		
		$sql="INSERT INTO Newsletters (FileName, Date, Description)
		VALUES
		('$_POST[FileName]','$_POST[Date]','$_POST[Description]')";
		
		if (!mysql_query($sql,$con))
		  {
		  die('Error: ' . mysql_error());
		  }
		echo "Newsletter info has been added to the database.";
		mysql_close($con);
	print "Your file has been uploaded successfully!";
	
	
	} else {
	print "Incorrect file extension!";
	}
?>

$file = $_POST[submitted_file"];

if (file_exist("uploads/".$file)){ 

....