Выбор аватарки из личного фотоальбома

if(!defined('VALID_CMS')) { die('ACCESS DENIED'); }

function img_res($src, $dest, $width, $height, $rgb=0xFFFFFF, $quality=100)
{
  if (!file_exists($src)) return false;
  $size = getimagesize($src);
  if ($size === false) return false;
 
  $format = strtolower(substr($size['mime'], strpos($size['mime'], '/')+1));
  $icfunc = "imagecreatefrom" . $format;
  if (!function_exists($icfunc)) return false;
 
  $x_ratio = $width / $size[0];
  $y_ratio = $height / $size[1];
  $ratio       = min($x_ratio, $y_ratio);
  $use_x_ratio = ($x_ratio == $ratio);
  $new_width   = $use_x_ratio  ? $width  : floor($size[0] * $ratio);
  $new_height  = !$use_x_ratio ? $height : floor($size[1] * $ratio);
  $new_left    = $use_x_ratio  ? 0 : floor(($width - $new_width) / 2);
  $new_top     = !$use_x_ratio ? 0 : floor(($height - $new_height) / 2);
  $isrc = $icfunc($src);
  $idest = imagecreatetruecolor($width, $height);
  imagefill($idest, 0, 0, $rgb);
  imagecopyresampled($idest, $isrc, $new_left, $new_top, 0, 0, 
    $new_width, $new_height, $size[0], $size[1]);
  imagejpeg($idest, $dest, $quality);
  imagedestroy($isrc);
  imagedestroy($idest);
 
  return true;
}

/////////////////////////////// Установка аватара из фотоальбома /////////////////////////////////////////////////////////////////////////////////////////
if ($do=='setav'){
$photoid = @intval($_REQUEST['photoid']);	
$sql = "SELECT imageurl FROM cms_user_photos WHERE id = $photoid AND user_id = $id";
$result = $inDB->query($sql);		
$photo = $inDB->fetch_assoc($result);
$filename=$photo['imageurl'];
 
$uploaddir= $_SERVER['DOCUMENT_ROOT'].'/images/users/';		
$uploadfile		= $uploaddir .'/photos/medium/'.$filename;
$uploadavatar 	= $uploaddir .'/avatars/'.$filename;
$uploadthumb 	= $uploaddir . 'avatars/small/' . $filename;
 
if (isset($cfg['smallw'])) { $smallw = $cfg['smallw']; } else { $smallw = 64; }
if (isset($cfg['medw'])) { 	 $medw = $cfg['medw']; } else { $medw = 200; }
if (isset($cfg['medh'])) { 	 $medh = $cfg['medh']; } else { $medh = 200; }
 
 img_res($uploadfile, $uploadavatar, $medw, $medh);
 img_res($uploadfile, $uploadthumb, 70, 80);
 
 
							$sql = "SELECT imageurl FROM cms_user_profiles WHERE id = $userid";
							$result = $inDB->query($sql) ;
							if ($inDB->num_rows($result)){
								$old = $inDB->fetch_assoc($result);
                            };				
 
				 if ($old['imageurl']=='nopic.jpg'){
				    $sql = "UPDATE cms_users SET rating = rating + 10  WHERE id = '$id'";		
					$inDB->query($sql);
				}
				if ($old['imageurl']==''){
					$sql = "UPDATE cms_users SET rating = rating + 10  WHERE id = '$id'";		
					$inDB->query($sql);
				}
 
			               $sql = "UPDATE cms_user_profiles
                        SET imageurl = '$filename'
                        WHERE user_id = '$id'
                        LIMIT 1";
                $inDB->query($sql) ;
$inCore->redirect(cmsUser::getProfileURL($inUser->login));
}

if ($previd && $nextid) { echo '<td>|</td>'; }

 
if ($myprofile) {
echo '<td><a style="height:16px; line-height:35px;margin-right:5px; padding-left:20px; background:url(/components/users/images/male.gif) no-repeat;"  href="/users/'.$usr['id'].'/setav'.$photoid.'.html">Сделать аватаром</a></td> ';
}

//RewriteRule ^users/([0-9]*)/setav([0-9]*).html$ /index.php?view=users&do=setav&id=$1&photoid=$2
$routes[] = array(
'_uri'  => '/^users\/([0-9]+)\/setav([0-9]+).html$/i',
'do'    => 'setav',
1       => 'id',
2       => 'photoid'
);