case "upload":
			{
				if(isset($_POST["katname"]) && isset($_POST["bild"]))
				{
					$katname=$_POST["katname"];
					$bild=clean_path($_POST["bild"]);
					//str_replace("\ ","/",$bild);
					$ziel="res/img/gallery/$katname";
					$dateiname=$_FILES[$bild]['name']; <-------------- line 151
					$speicherort=$_FILES[$bild]['tmp_name']; <---------- line 152
					move_uploaded_file($speicherort,$ziel.$dateiname);
				}
				else
				{
					echo "
<form name='uploadform' method='post' action='".$_SERVER['PHP_SELF']."?op=upload'>
					<table><tr><td>Kategorie: </td><td><select name='katname'>";
					$sql="SELECT um_name FROM tbl_umenu ORDER BY um_name";
					if(!$res=mysql_query($sql))		//querry ausführen -> sendet $sql an datenbank
							echo mysql_error();			//fehlerausgabe
					while($ergebnis_array=mysql_fetch_array($res))
					{
						$katname=$ergebnis_array["um_name"];
						echo "<option value='$katname'>$katname</option>";
					}
					echo "</select></td></tr>
					<tr><td>Bild: </td><td><input type='file' name='bild' /></td></tr>
					<tr><td><input type='submit' value='uploaden' /></td></tr>";		
				}
				break;
			}