function do_gallery()
{
//for security remove initial . and / - do not allow t o climb above PHP_SELF folder
$folder=ereg_replace("^[\./]*",'',$_GET['folder']);
//echo "you are here"
if ($folder) echo '' . str_replace('/', ' --> ', $folder) . '';
if ($folder=='') $folder='.';
if (!is_dir($folder) || !is_readable($folder)) exit;
$dir = dir($folder);
while($temp = $dir->read())
{
$dirarray[] = $temp;
}
sort($dirarray);
//list dirs
foreach($dirarray as $dir)
{
if ($dir=='..' && $folder!='.')
{
$lastslash = strrpos($folder, '/');
$up=substr($folder,0,$lastslash);
echo "
Up one level";
}
if (is_dir("$folder/$dir") && $dir!='.' && $dir!='..') echo "
$dir";
}
//display images
foreach($dirarray as $item)
{
$lastdot = strrpos($item, '.');
$ext= substr($item,$lastdot+1);
$name=substr($item,0,$lastdot);
if ($ext=='jpg') echo "
" . str_replace('_',' ',$name);
}
}
echo "