need help

<?php
/*
 * JohnCMS NEXT Mobile Content Management System (http://johncms.com)
 *
 * For copyright and license information, please see the LICENSE.md
 * Installing the system or redistributions of files must retain the above copyright notice.
 *
 * @linkhttp://johncms.com JohnCMS Project
 * @copyright   Copyright (C) JohnCMS Community
 * @license GPL-3
 */

defined('_IN_JOHNCMS') or die('Error: restricted access');

require('../system/head.php');

/** @var Psr\Container\ContainerInterface $container */
$container = App::getContainer();

/** @var PDO $db */
$db = $container->get(PDO::class);

/** @var Johncms\Api\UserInterface $systemUser */
$systemUser = $container->get(Johncms\Api\UserInterface::class);

/** @var Johncms\Api\ToolsInterface $tools */
$tools = $container->get(Johncms\Api\ToolsInterface::class);

/** @var Johncms\Api\ConfigInterface $config */
$config = $container->get(Johncms\Api\ConfigInterface::class);

if (!$id || !$systemUser->isValid()) {
    echo $tools->displayError(_t('Wrong data'));
    require('../system/end.php');
    exit;
}

// Проверяем, тот ли юзер заливает файл и в нужное ли место
$res = $db->query("SELECT * FROM `forum` WHERE `id` = '$id' AND `type` = 't'")->fetch();
$user = $db->query("SELECT `rights` FROM `users` WHERE `id`='" . $res['user_id'] . "' LIMIT 1")->fetch();
if (!$res || ($res['user_id'] != $systemUser->id && $user['rights'] >= $systemUser->rights)) {
    echo $tools->displayError(_t('Wrong data'));
    require('../system/end.php');
    exit;
}


$pa2 = $db->query("SELECT `id` FROM `forum` WHERE `type` = 'm' AND `refid` = '" . $res['id'] . "'")->rowCount();
$page = ceil($pa2 / $kmess);
// Форма выбора файла для выгрузки
echo '<div class="formjs mrt-code card shadow--2dp color--blue-grey-700"><div class="phdr"><h4>Upload thumbnail</h4></div>' .
    '<div class="jserror" style="display:none;"></div>';
echo '<div class="list1"><form method="post" enctype="multipart/form-data">' .
    '<div class="file_input_div">' .
    '<div class="file_input">' .
    '<label class="image_input_button m-button m-button--fab m-button--mini-fab m-button--colored">' .
    '<i class="material-icons">&#xE2C6;</i>' .
    '<input id="file_input_file" class="none" type="file" name="imagefile" required="required"/>' .
    '</label>' .
    '</div>' .
    '<div id="file_input_text_div" class="m-textfield">' .
    '<input class="file_input_text m-textfield__input" type="text" disabled readonly id="file_input_text" />' .
    '<label class="m-textfield__label" for="file_input_text"></label>' .
    '</div>' .
    '</div>' .
    '<input type="hidden" name="t" value="avatar" />' .
    '<input type="hidden" name="a" value="thumb" />' .
    '<input type="hidden" name="id" value="' . $id . '" />' .
    '<div class="button-container"><button class="button" type="submit" name="submit"><span>' . _t('Upload') . '</span></button></div></form></div>' .
    '<div class="list1">' . _t('Max. Size') . ': ' . $config['flsz'] . 'kb.</div>' .
    '<div class="list1"><a href="/forum/' . $res['id'] . '/' . $res['seo'] . '_p' . $page . '.html">' . _t('Back to topic') . '</a></div>' .
    '</div>';

if ($_POST['thumb'] == 1) {
            $path = ROOT_PATH . 'files/forum/thumbnail/';
            $dataCrop = array(
                'type' => 'crop',
                'width' => 100,
                'height' => 100,
                'name' => ''
                );

            if(preg_match('#\[img\](https?://.+?)\[\/img\]#i', $msg, $maches)) {
                $img = $maches[1];
                if(@getimagesize($img)){
                    $nameFile = basename($img);
                    $ext = strtolower(substr($nameFile, strrpos($nameFile, '.') + 1, strlen($nameFile) - strrpos($nameFile, '.')));
                    $path = $path . $rid . '.' . $ext;
                    $data = $tools->grab($img);
                    if (file_put_contents($path, $data)) {
                        $tools->processMedia($dataCrop['type'], $path, $path, $dataCrop['width'], $dataCrop['height']);
                        $db->exec("UPDATE `forum` SET
                            `thumb_extension` = '" . $ext . "'
                            WHERE `id` = '" . $rid  . "'
                          ");
                        header('Location: ' . $config['homeurl'] . '/forum/' . $rid . '/' . $seo . '.html#post-' . $postid);
                    } else {
                        @unlink($path);
                    }
                }
            } else if(preg_match('#\[img=(https?://.+?)\]#i', $msg, $maches)) {
                $img = $maches[1];
                if(@getimagesize($img)){
                    $nameFile = basename($img);
                    $ext = strtolower(substr($nameFile, strrpos($nameFile, '.') + 1, strlen($nameFile) - strrpos($nameFile, '.')));
                    $path = $path . $rid . '.' . $ext;
                    $data = $tools->grab($img);
                    if (file_put_contents($path, $data)) {
                        $tools->processMedia($dataCrop['type'], $path, $path, $dataCrop['width'], $dataCrop['height']);
                        $db->exec("UPDATE `forum` SET
                            `thumb_extension` = '" . $ext . "'
                            WHERE `id` = '" . $rid  . "'
                          ");
                        header('Location: ' . $config['homeurl'] . '/forum/' . $rid . '/' . $seo . '.html#post-' . $postid);
                    } else {
                        @unlink($path);
                    }
                }
            } else {
                header("Location: index.php?id=$rid&act=thumb");
            }
        } else {
            header("Location: index.php?id=$rid&act=thumb");
        }
    } else {
        // Выводим сообщение об ошибке
        echo $tools->displayError($error);
    }