<?
//->
function sqlSafeString($param) {
    // Hier wird wg. der grossen Verbreitung auf MySQL eingegangen
    return (NULL === $param ? "" : '"'.mysql_escape_string ($param).'"');
  }


$UserPicNick=$_GET['uname'];
$UserPicNick=sqlSafeString($UserPicNick);

include("../config/config.inc.php");  
include("../$dbpath/openDb.inc.php");
$sql="select XXX FROM user WHERE XXX  =$UserPicNick";
$result=mysql_query($sql); 
while ($row=mysql_fetch_array($result)) 
{
$UserPhotoFROMDB=$row["XXX"];
$UserPhotoDBDokpicroot="$fulldokroot/peoplepics/$UserPhotoFROMDB";
}

$filename = $UserPhotoDBDokpicroot;

// Set a maximum height and width
$width = 200;
$height = 150;

// Content type
header('Content-type: image/jpeg');

// Get new dimensions
list($width_orig, $height_orig) = getimagesize($filename);

if ($width && ($width_orig < $height_orig)) {
   $width = ($height / $height_orig) * $width_orig;
} else {
   $height = ($width / $width_orig) * $height_orig;
}

// Resample
$image_p = imagecreatetruecolor($width, $height);
$image = imagecreatefromjpeg($filename);
imagecopyresampled($image_p, $image, 0, 0, 0, 0, $width, $height, $width_orig, $height_orig);

// Output
imagejpeg($image_p, null, 100);

//->
?>