<?php include('./security.php'); ?>
<?php
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    // File upload handling
    if (isset($_FILES['file']) && $_FILES['file']['error'] == 0) {
        $file = $_FILES['file']['name'];
        $file_tmp = $_FILES['file']['tmp_name'];
        $file_path = "assets/images/uploads/" . uniqid() . '-' . preg_replace('/\s+/', '_', $file);

        if (move_uploaded_file($file_tmp, $file_path)) {
            // 上传成功返回文件链接
            echo json_encode(['success' => true, 'filePath' => $file_path]);
        } else {
            echo json_encode(['success' => false, 'message' => 'Error moving uploaded file.']);
        }
    } else {
        echo json_encode(['success' => false, 'message' => 'No file uploaded or upload error.']);
    }
} else {
    echo json_encode(['success' => false, 'message' => 'Invalid request method.']);
}
?>