<?php
// postAcceptor.php

// Define allowed origins (optional)
header('Access-Control-Allow-Origin: *');

// Target directory
$imageFolder = "uploads/";

// Create directory if it doesn't exist
if (!file_exists($imageFolder)) {
    mkdir($imageFolder, 0777, true);
}

// Get the file and check if it's an uploaded file
reset($_FILES);
$temp = current($_FILES);

if (is_uploaded_file($temp['tmp_name'])){
    // Basic sanitization and extension verification
    if (preg_match("/([^\w\s\d\-_~,;\[\]\(\).])|([\.]{2,})/", $temp['name']) || !in_array(strtolower(pathinfo($temp['name'], PATHINFO_EXTENSION)), array("gif", "jpg", "png", "jpeg"))) {
        header("HTTP/1.1 400 Invalid file.");
        return;
    }

    // Move the uploaded file
    $filetowrite = $imageFolder . $temp['name'];
    move_uploaded_file($temp['tmp_name'], $filetowrite);

    // Respond with JSON including the image location
    echo json_encode(array('location' => $filetowrite));
} else {
    // Handle upload failure
    header("HTTP/1.1 500 Server Error");
}
?>