dle Добавление изображений в addnews как в userinfo

<input type="file" name="file" onclick="dle_image_upload( 'admin', '' ); return false;" class="f_input" />

        $image = $_FILES['image']['tmp_name'];
        $image_name = $_FILES['image']['name'];
        $image_size = $_FILES['image']['size'];
        $img_name_arr = explode( ".", $image_name );
        $type = totranslit( end( $img_name_arr ) );
        
        if( $image_name != "" ) $image_name = totranslit( stripslashes( $img_name_arr[0] ) ) . "." . $type;

        if( strpos ( $image_name, "php" ) !== false ) die("Hacking attempt!");
    
        if( is_uploaded_file( $image ) and ! $stop ) {
            
            if( intval( $user_group[$member_id['user_group']]['max_foto'] ) > 0 ) {
                
                if( !$config['avatar_size'] OR $image_size < ($config['avatar_size'] * 1024) ) {
                    
                    $allowed_extensions = array ("jpg", "png", "jpe", "jpeg", "gif" );
                    
                    if( in_array( $type, $allowed_extensions ) AND $image_name ) {
                        
                        include_once ENGINE_DIR . '/classes/thumb.class.php';
                        
                        $res = @move_uploaded_file( $image, ROOT_DIR . "/uploads/fotos/" . $row['user_id'] . "." . $type );
                        
                        if( $res ) {
                            
                            @chmod( ROOT_DIR . "/uploads/fotos/" . $row['user_id'] . "." . $type, 0666 );
                            $thumb = new thumbnail( ROOT_DIR . "/uploads/fotos/" . $row['user_id'] . "." . $type );
                            
                            $thumb->size_auto( $user_group[$member_id['user_group']]['max_foto'] );
                            $thumb->jpeg_quality( $config['jpeg_quality'] );
                            $thumb->save( ROOT_DIR . "/uploads/fotos/foto_" . $row['user_id'] . "." . $type );
                            
                            @chmod( ROOT_DIR . "/uploads/fotos/foto_" . $row['user_id'] . "." . $type, 0666 );
                            $foto_name = "foto_" . $row['user_id'] . "." . $type;
                            
                            $db->query( "UPDATE " . USERPREFIX . "_users set foto='$foto_name' WHERE user_id = '{$id}'" );
                        
                        } else
                            $stop .= $lang['news_err_14'];
                    } else
                        $stop .= $lang['news_err_15'];
                } else
                    $stop .= str_replace("{size}", $config['avatar_size'], $lang['news_err_16']);
            } else
                $stop .= $lang['news_err_32'];
            
            @unlink( ROOT_DIR . "/uploads/fotos/" . $row['user_id'] . "." . $type );
        }