File upload unlimited

<br /><? include '../include/connect.php'; ?> <br /><? include 'include/header.php'; ?> <br /><? include '../include/settings.php'; ?> <br /><? <br />$k=10; <br />extract($_REQUEST); <br /> <br /> if(isset($_REQUEST['upload'])) <br />{ <br /> <br /> <br /> <br /> $c1 = rand(0,9);$c2 = rand(0,9);$c3 = rand(0,9);$c4 = rand(0,9); <br /> <br />$rand = $c1.$c2.$c3.$c4; <br />for($i=0;$i<count($_FILES['upload1']['name']);$i++) <br />{ <br />if($_FILES['upload1']['name'][$i]!="") <br />{ <br /> <br /> $dir_path = "album/".$res.$rand.$_FILES['upload1']['name'][$i]; <br /> <br /> move_uploaded_file($_FILES['upload1']['tmp_name'][$i],"../".$dir_path); <br /> <br /> $path=$dir_path; <br /> $displaytitle=$_REQUEST['upload_title'][$i]; <br /> $displaytag=$_REQUEST['upload_cost'][$i]; <br /> $displaydescription=$_REQUEST['upload_desc'][$i]; <br /> <br /> $insertcust="insert into ".PHOTOS." set photographerid='$photographers',customerid='$customerid',image_path='$path',image_title='$displaytitle',image_cost='$displaytag',image_description='$displaydescription',submitteddate=NOW()"; <br /> $resultcust=mysql_query($insertcust); <br /> $flag=1; <br /> <br /> <br />} <br /> <br />} <br /> <br /> echo "<meta http-equiv='refresh' content='0;url=viewphotos.php'>"; <br /> exit(); <br /> <br /> <br />} <br />?> <br /> <br /><td > <br /><table cellpadding="0" cellspacing="0" width="100%" align="center" bgcolor="#FFFFFF"> <br /><tr> <br /><? require "include/leftmenu.php";?> <br /><td valign="top"> <br /> <br /><table cellpadding="0" cellspacing="0" width="100%" align="center"> <br /><tr bgcolor="#ffffff" > <br /><td width="483" height="30" bgcolor="#ffffff" class="contentbig" style="padding-left:10px;"><a href="home.php" style="text-decoration:none" class="contentback" > Home </a> >> New Photos</td> <br /><td width="203" align="right"> </td> <br /><td width="136" align="right"> </td> <br /><td width="149" align="right"> <br /> <br /><a href="viewphotos.php" class="contentback" ><< Back</a> <br /> </td> <br /></tr> <br /><tr bgcolor="#ffffff" > <br /><td height="30" bgcolor="#ffffff" class="contentbig" style="padding-left:10px;"> </td> <br /><td align="right"> </td> <br /><td align="right"> </td> <br /><td align="right">  <br /> <br /></td> <br /></tr> <br /></table> <br /> <br /> <br /> <br /><form method="post" enctype="multipart/form-data" name="form1" id="form1" action="newphotos.php" onsubmit="return developvalidate();"> <br /> <table height="350" width="100%" border="0" cellspacing="0" cellpadding="0"> <br /> <tr> <br /> <td valign="top"><table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <br /> <br /> <tr> <br /> <td colspan="2" align="right" class="toptxt1"> </td> <br /> </tr> <br /> <tr><td colspan="2" class="content"><h2><font class="staff">Add your photos one by one</font></h2> <br /> <p><font style="font-weight:normal">Click ‘Browse’, select a photo, then click ‘Open’ to add it to the upload box. Continue until you’ve got all the photos you want and click ‘Start upload’.</font></p></td></tr> <br /> <br /> <tr><td align="center" colspan="2"> <br /> <br /> <table width="100%" border="0" cellpadding="5" cellspacing="5" id="table1" align="center" class="content"> <br /> <tr> <br /> <td align="center" > </td> <br /> <td align="center" >Photographers Name</td> <br /> <td colspan="2" align="left" > <? $selcustomers="select * from ".STAFF." where `status`='photographer' order by userid"; <br /> $rescustomers=mysql_query($selcustomers); <br /> ?> <br /> <select id="photographers" name="photographers"> <br /> <? while($reccustomers=mysql_fetch_array($rescustomers)) <br /> { ?> <br /> <option value="<?=$reccustomers['id'];?>"><?=$reccustomers['userid'];?></option> <br /> <? } ?> <br /> </select> <br /> </td> <br /> <td align="center" ></td> <br /> </tr> <br /> <br /> <br /> <tr> <br /> <td align="center" > </td> <br /> <td align="center" >Customer Name</td> <br /> <td colspan="2" align="left" > <? $selcustomers="select * from ".CUSTOMER." order by customername"; <br /> $rescustomers=mysql_query($selcustomers); <br /> ?> <br /> <select id="customerid" name="customerid"> <br /> <? while($reccustomers=mysql_fetch_array($rescustomers)) <br /> { ?> <br /> <option value="<?=$reccustomers['id'];?>"><?=$reccustomers['customername'];?></option> <br /> <? } ?> <br /> </select> <br /> </td> <br /> <td align="center" ></td> <br /> </tr> <br /> <br /> <br /> <tr> <br /> <td align="center" > </td> <br /> <td align="center" > </td> <br /> <td align="center" > </td> <br /> <td align="center" > </td> <br /> <td align="center" ></td> <br /> </tr> <br /> <br /> <br /> <tr> <br /> <td align="center" >  Photo</td> <br /> <td align="center" > Title</td> <br /> <td align="center" >Cost</td> <br /> <td align="center" > Description</td> <br /> <td align="center" > </td> <br /> </tr> <br /> <tr> <br /> <td align="center" > </td> <br /> <td align="center" > </td> <br /> <td align="center" > </td> <br /> <td align="center" > </td> <br /> <td align="center" style="font-weight:normal" > </td> <br /> </tr> <br /> <tr> <br /> <td align="center" ><input type="file" name="upload1[]" id="upload1_0" size="17" /></td> <br /> <td align="center" ><input type="text" name="upload_title[]" id="upload_title_0" size="17"/></td> <br /> <td align="center" ><input type="text" name="upload_cost[]" id="upload_cost_0" size="8"/></td> <br /> <td align="center" ><textarea name="upload_desc[]" id="upload_desc_0" rows="3" cols="20" >
 

"