working on an upload script... but having problems...

[Mr. Goodie2Shoes]

okay, for example, this is my domain: mydomain.com and the upload is in mydomain.com/admin/upload.php and its password protected...
I'll be selecting a file and then from my database, the script will get the IP of a totally different server where the files will be uploaded... here's the part of the script:

if(isset($_FILES['file']) && isset($_REQUEST['subject']) && isset($_REQUEST['year'])){
    $subjectinfo = mysql_query("SELECT * FROM ~something~ where subject_code='".$_REQUEST['subject']."'", DBH);
    $subjectinforow = mysql_fetch_array($subjectinfo);
    $filename = $_REQUEST['subject'].' - '.$subjectinforow['subject_name'].' - '.$_REQUEST['year'].'.zip';
    $checkiffileexist = mysql_query("SELECT * FROM ~something~ WHERE file_name='".$filename."'", DBH);
    if(mysql_num_rows($checkiffileexist)){
        $fileexists = TRUE;
    }else{
    $filesize = $_FILES['file']['size'];
    $newkey = generatekey($_SESSION['config']['file_key_length']);
    $checkkey = mysql_query("SELECT * FROM ~something~ WHERE file_key='".$newkey."'", DBH);
    while(mysql_num_rows($checkkey)){
        $newkey = generatekey($_SESSION['config']['file_key_length']);
    }
    $server = $subjectinforow['server_ip'];    
    $location = 'D:/downloadables/docs/'.$_REQUEST['subject'].'/'.$_REQUEST['year'].'.zip';
    $result = mysql_query("INSERT INTO ~something~ (file_key, file_name, server_ip, file_location, file_size, file_hits) VALUES ('".$newkey."', '".$filename."', '".$server."', '".$location."', '".$filesize."', '0')", DBH);
    $ch = curl_init('http://'.$server.'/~something~');
    $post = '&pass=~something~';
    $post = '&file='.$_FILES['file'];
    $post = '&subject'.$_POST['subject'];
    $post = '&year'.$_POST['year'];
    curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_exec($ch);
    curl_close($ch);
    }
} 

I think this part of the code is working perfectly... and the upload script located in the server:

switch($_REQUEST['pass']){
    case '~something~':
        $maindir = 'D:/downloadables/docs/';
        $uploaddir = $maindir.$_POST['subject'];
        if (!file_exists($uploaddir))
            @mkdir($uploaddir);
        move_uploaded_file($_FILES['file']['tmp_name'], $uploaddir.'/'.$_POST['year'].'.zip');
        break;
    default:
        header('Location: http://~something~');
        break;
} 

any kinda help will be really appreciated

Mr. Goodie2Shoes Reviewed by Mr. Goodie2Shoes on 26th May 2012. working on an upload script... but having problems... okay, for example, this is my domain: mydomain.com and the upload is in mydomain.com/admin/upload.php and its password protected... I'll be selecting a file and then from my database, the script will get the IP of a totally different server where the files will be uploaded... here's the part of the script: if(isset($_FILES) && isset($_REQUEST) && isset($_REQUEST)){ $subjectinfo = mysql_query("SELECT * FROM ~something~ where subject_code='".$_REQUEST."'", DBH); $subjectinforow = Rating: 5