PHP - Upload Videos And Music Files Using Php

So far I have managed to create an upload process which uploads a picture, updates the database on file location and then tries to upload the db a 2nd time to update the Thumbnails file location (i tried updating the thumbnails location in one go and for some reason this causes failure)

But the main problem is that it doesn't upload some files

Here is my upload.php

<?php
include 'dbconnect.php';

$statusMsg = '';

$Title = $conn -> real_escape_string($_POST['Title']) ; 
$BodyText = $conn -> real_escape_string($_POST['ThreadBody']) ; 
	 

// File upload path
$targetDir = "upload/";
$fileName = basename($_FILES["file"]["name"]);
$targetFilePath = $targetDir . $fileName;
$fileType = pathinfo($targetFilePath,PATHINFO_EXTENSION);
$Thumbnail = "upload/Thumbnails/'$fileName'";

if(isset($_POST["submit"]) && !empty($_FILES["file"]["name"])){
    // Allow certain file formats
    $allowTypes = array('jpg','png','jpeg','gif','pdf', "webm", "mp4");
    if(in_array($fileType, $allowTypes)){

        // Upload file to server
        if(move_uploaded_file($_FILES["file"]["tmp_name"], $targetFilePath)){

            // Insert image file name into database
            $insert = $conn->query("INSERT into Threads (Title, ThreadBody, filename) VALUES ('$Title', '$BodyText', '$fileName')");
            if($insert){
               $statusMsg = "The file ".$fileName. " has been uploaded successfully."; 

		$targetFilePathArg = escapeshellarg($targetFilePath);
		$output=null;
		$retval=null;
		 //exec("convert $targetFilePathArg -resize 300x200 ./upload/Thumbnails/'$fileName'", $output, $retval);
		 exec("convert $targetFilePathArg -resize 200x200 $Thumbnail", $output, $retval);
		echo "REturned with status $retval and output:\n" ; 
		if ($retval == null) { 
		echo "Retval is null\n" ;
		echo "Thumbnail equals $Thumbnail\n" ; 
		}

            }else{
                $statusMsg = "File upload failed, please try again.";
            } 
        }else{
            $statusMsg = "Sorry, there was an error uploading your file.";
        }
    }else{
        $statusMsg = 'Sorry, only JPG, JPEG, PNG, GIF, mp4, webm & PDF files are allowed to upload.';
    }
}else{
    $statusMsg = 'Please select a file to upload.';
}

//Update SQL db by setting the thumbnail column to equal $Thumbnail
$update = $conn->query("update Threads set thumbnail = '$Thumbnail' where filename = '$fileName'");
            if($update){
               $statusMsg = "Updated the thumbnail to sql correctly.";
		echo $statusMsg ;  } 
else 
{ echo "\n Failed to update Thumbnail. Thumbnail equals $Thumbnail" ; } 


// Display status message
echo $statusMsg;
?>

And this does work on most files however it is not working on a 9.9mb png file  which is named "test.png" I tested on another 3.3 mb gif file and that failed too?

For some reason it returns the following

Updated the thumbnail to sql correctly.Updated the thumbnail to sql correctly.

Whereas on the files it works on it returns

REturned with status 0 and output: Retval is null Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif' Failed to update Thumbnail. Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif'The file rainbow-trh-stache.gif has been uploaded successfully.

Any idea on why this is?

I am looking to allow people to also upload pdf and doc ad txt  files can you show me how to convert this script . Thanks.
Code: [Select]
[php]

// Check to see if the type of file uploaded is a valid image type
 function is_valid_type($file) 
 {
// This is an array that holds all the valid image MIME types 

     $valid_types = array("image/jpg", "image/jpeg", "image/bmp","image/gif"); 
     if (in_array($file['type'], $valid_types)) 

         return 1; 

     return 0; 
 }

[/php]

Good afternoon, I wrote a script for uploading files to ftp server. When I lunch this on local server(wamp) it does upload files into ftp server. When I run the same script on my host provider(iPage) it doesn't upload files. Any advices? Have a look at the code please.   form <code> <form enctype="multipart/form-data" action="upload.php" method="post">
    <table >

        <tr>
            <td>

            <input name="userfile" type="file">
            &nbsp;
            </td>                
        </tr>                

        <tr>        
            <td >
            <input type="Submit" value="Add file">
            </td>        
        </tr>

    </table>
</form> </code>   upload.php <code> <?php
######################################################################
/*
For remote servers
*/
ini_set("max_execution_time", 100000000000);  // execution time must be bigger for larger files
$file = basename($_FILES['userfile']['name']);


//$remote_file = "/home/users/web/b1729/ipg.marcinkopecnet/remote_upload/$file";
$remote_file = "/remote_upload/$file";

/*
Define ftp server connection
*/
$ftp_server = "right_server";
$ftp_user_name = "right_username";
$ftp_user_pass = "right_password";

// set up basic connection
$conn_id = ftp_connect($ftp_server, 21) or die ("Cannot connect to host");

// turn passive mode on
ftp_pasv($conn_id, true);

// login with username and password
$login_result = ftp_login($conn_id, $ftp_user_name, $ftp_user_pass) or die("Cannot login");

// upload a file
if ($upload = ftp_put($conn_id, $remote_file, $_FILES['userfile']['tmp_name'], FTP_BINARY))
    {
    // check upload status:
    print (!$upload) ? 'Cannot upload' : 'Upload complete';
    print "\n";    
    
    //echo "successfully uploaded $file\n";
    }
else
    {
    echo "There was a problem while uploading $file\n";
    }

// close the connection
ftp_close($conn_id);
######################################################################
?> </code>
Edited by MarcinUK, 04 September 2014 - 05:39 PM.

Good day:

I have a simple uploader form to upload video files. FLV and mpg files will upload without problems. But mp4, m4v, ogg and webm files will not upload. I get this error:

Warning: copy() [function.copy]: Unable to access in /mounted-storage/home7/sub007/sc30390-PTUD/**********.com/admin123/insertvideo.php on line 32
Error Video not loaded.

I have read about adding the files in config/mimes.php but I do not see that folder or files in my hosting service (which is servage).

Any help will be appreciated.


Thanks.

I am using the following code to upload images for my products. How can I modify it to not only upload the product image, but upload it a 2nd time resized for thumbnail or is it even possible?
Code: [Select]
if ($_FILES['file']['error'] > 0)
    {
    echo "Return Code: " . $_FILES['file']['error'] . "<br />";
    }
  else
    {
    echo "Upload: " . $_FILES['file']['name'] . "<br />";
    echo "Type: " . $_FILES['file']['type'] . "<br />";
    echo "Size: " . ($_FILES['file']['size'] / 1024) . " Kb<br />";
    echo "Temp file: " . $_FILES['file']['tmp_name'] . "<br />";

    if (file_exists("images/" . $_FILES['file']['name']))
      {
      echo $_FILES['file']['name'] . " already exists. ";
      }
    else
      {
      move_uploaded_file($_FILES['file']['tmp_name'],
      "images/$companyname/$materialdir/$prefix$modelnumber.jpg");     
//"images/" . $companyname . "/" . $materialdir/$prefix$modelnumber . ".jpg");
      //"images/" . $_FILES['file']['name']);//change to Timp folder
      // "C:/upload/" . $_FILES['file']['name']);//change to Timp folder
      //echo "Stored in: " . "C:/xampp/htdocs/Timp/UserLogin/upload/" . $_FILES["file"]["name"];
       echo "Stored in: images/$companyname/$materialdir/$prefix$modelnumber.jpg";
      }
    }


$photo = "images/$companyname/$materialdir/$prefix$modelnumber.jpg";

Hey guys, im uploading up to 48 PNG images from one page, this works fine when theres only a few images, but doesnt work the more there are. Is there any reason for this?

Is it to do with php.ini or is that per file, not for the whole upload?

Thanks.
Danny.

I'm using the following code to create a folder from a text field and works fine.
I would like to upload 3 files in the created folder.

<?php
// set our absolute path to the directories will be created in:
$path = $_SERVER['DOCUMENT_ROOT'] . '/uploads/';
 
 
if (isset($_POST['create'])) {
   // Grab our form Data
   $dirName = isset($_POST['dirName'])?$_POST['dirName']:false;
 
   // first validate the value:
   if ($dirName !== false && preg_match('~([^A-Z0-9]+)~i', $dirName, $matches) === 0) {
      // We have a valid directory:
      if (!is_dir($path . $dirName)) {
         // We are good to create this directory:
         if (mkdir($path . $dirName, 0775)) {
            $success = "Your directory has been created succesfully!<br /><br />";
         }else {
            $error = "Unable to create dir {$dirName}.";
         }
      }else {
         $error = "Directory {$dirName} already exists.";
      }
   }else {
      // Invalid data, htmlenttie them incase < > were used.
      $dirName = htmlentities($dirName);
      $error = "You have invalid values in {$dirName}.";
   }
}
?>
<html>
<head><title>Make Directory</title></head>
<body>
   <?php echo (isset($success)?"<h3>$success</h3>":""); ?>
   <h2>Make Directory on Server</h2>
   <?php echo (isset($error)?'<span style="color:red;">' . $error . '</span>':''); ?>
   <form name="phpMkDIRForm" method="POST" action="<?php echo $_SERVER['PHP_SELF']; ?>">
   Enter a Directory Name (Alpha-Numeric only): <input type="text" value="" name="dirName" /><br />
   <input type="submit" name="create" value="Create Directory" />
   </form>
</body>
</html>

<!doctype html>
<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="content-type">
<title>Untitled Document</title>
</head>

<body>
<form action="upload_image.php" method="post" enctype="multipart/form-data">
<label>select page<input type="file" name="image">
<input type="submit" name="upload">
</label>
</form>
<?php 
if(isset($_POST['upload']))
{
	$image_name=$_FILES['image']['name']; //return the name ot image
	$image_type=$_FILES['image']['type']; //return the value of image
	$image_size=$_FILES['image']['size']; //return the size of image
	$image_tmp_name=$_FILES['image']['tmp_name'];//return the value
	if($image_name=='')
	{
		echo '<script type="text/javascript">alert("please select image")</script>';
		exit();
	}
	else
	{
		$ex=move_uploaded_file($image_tmp_name,"image/".$image_name);
		if($ex)
		{
		    echo 'image upload done "<br>"';
			echo $image_name.'<br>';
			echo $image_size.'<br>';
			echo $image_type.'<br>';
			echo $image_tmp_name.'<br>';
		}
		else
		{
			echo 'error';
		}
	}
}
?>
</body>
</html>

I make this simple script for upload files like photo , It's work correctly ,but not upload the large files ex 8MB images 12MB images
Edited by Ch0cu3r, 04 October 2014 - 09:50 AM.
Modified topic title - changed download to upload

Hi All,

I need some help blocking files that don't pass authentication from being uploaded to the server.

Here is my script (below).  It correctly throws errors, but regardless of error / no-error, the file is uploaded. For example, the only files allowed to be uploaded should be .png, .jpeg, .gif -- but I see .flv .docx etc in the destination folder.

You'll see below a variable for each of the error messages.  They basically say that the file name is too long, too big, not an allowed file type, or English characters only allowed in file title name.

Again the errors work properly, but regardless files are uploaded to the "quiz_images" folder.

What do I need to do to stop the upload if an error is triggered?

Thank you for your help...  here is the code snip:

Code: [Select]

$directory_self = str_replace(basename($_SERVER['PHP_SELF']), '', $_SERVER['PHP_SELF']);

$uploadsDirectory = $_SERVER['DOCUMENT_ROOT'] . $directory_self . 'quiz_images/';

$fieldname = 'file';

if ($_POST[submit]) {

if ($_POST[title] <> "") {
$a = TRUE;
} else {
$a = FALSE;
$content .= "<p>$enter_title</p>\n";
}
if ($_POST[video] <> "") {
$b = TRUE;
} else {
$b = FALSE;
$content .= "<p>$enter_embed</p>\n";
}
if ($_POST[description_text] <> "") {
$c = TRUE;
} else {
$c = FALSE;
$content .= "<p>$enter_description</p>\n";
}
if ($_POST[submit] <> "") {
$f = TRUE;
} else {
$f = FALSE;
$content .= "<p>$sorry_error</p>\n";
}

if (is_uploaded_file($_FILES[$fieldname]['tmp_name'])) {
$g = TRUE;
} else {
$g = FALSE;
$content .= "<p>$sorry_error</p>\n";
}

if (getimagesize($_FILES[$fieldname]['tmp_name'])){
$h = TRUE;
} else {
$h = FALSE;
$content .= "<p>$error2</p>\n";
}

if ((($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/jpeg")
|| ($_FILES["file"]["type"] == "image/png")
|| ($_FILES["file"]["type"] == "image/pjpeg"))
&& ($_FILES["file"]["size"] < 50000)) {

$i = TRUE;
} else {
$i = FALSE;
$content .= "<p>$error2</p>\n";
}

if(preg_match('#^[a-z0-9_\s-\.]*$#i', $pic) ) {
$k = TRUE;
} else {
$k = FALSE;
$content .= "<p>$error3</p>\n";
}


$desc_length = strlen($pic);
        $limit = 40;
        if ($desc_length <= $limit) {
        $l = TRUE;
} else {
$l = FALSE;
$content .= "<p>$error4</p>\n";
}

$now = time();
while(file_exists($uploadFilename = $uploadsDirectory.$now.'-'.$_FILES[$fieldname]['name']))
{
$now++;
}

if (move_uploaded_file($_FILES[$fieldname]['tmp_name'], $uploadFilename)){
$j = TRUE;
} else {
$j = FALSE;
$content .= "<p>$enter_thumb</p>\n";
}

$pic=$now++.'-'.$_FILES[$fieldname]['name'];



if ($a AND $b AND $c AND $f AND $g AND $h AND $i AND $j AND $k AND $l) {............

I have 2 sites here that does what i need them to do but i dont know how to put the 2 codes together 

i got it to upload all files and used rand() to give the files a # but it ends up giving them all the same # lol so they overwrite them selfs lol


This site shows how to upload mltiple fiels with php.
http://www.ehow.com/how_6345068_upload-multiple-files-php.html


This site shows how to rename only 1 file uploaded with rand()
http://php.about.com/od/advancedphp/ss/rename_upload.htm


i pray this is not to hard to do and if any one gets bored after words can you show how to block a file type from being
uploaded ? like php/exe types

PS)i would call my self a php newbe lol and ty you for your time and help

Code from http://php.about.com/od/advancedphp/ss/rename_upload.htm

Code: [Select]
<form enctype="multipart/form-data" action="upload.php" method="POST">
Please choose a file: <input name="uploaded" type="file" /><br />
<input type="submit" value="Upload" />
</form>


//This function separates the extension from the rest of the file name and returns it 
function findexts ($filename)
{ $filename = strtolower($filename) ;
$exts = split("[/\\.]", $filename) ;
$n = count($exts)-1; $exts = $exts[$n];
return $exts;
}

//This applies the function to our file 
$ext = findexts ($_FILES['uploaded']['name']) ;

//This line assigns a random number to a variable. You could also use a timestamp here if you prefer. 
$ran = rand () ;
//This takes the random number (or timestamp) you generated and adds a . on the end, so it is ready of the file extension to be appended.
$ran2 = $ran.".";
//This assigns the subdirectory you want to save into... make sure it exists!
$target = "images/";
//This combines the directory, the random file name, and the extension
$target = $target . $ran2.$ext;
if(move_uploaded_file($_FILES['uploaded']['tmp_name'], $target)) {
echo "The file has been uploaded as ".$ran2.$ext; }
else {
echo "Sorry, there was a problem uploading your file.";
}
The code from http://www.ehow.com/how_6345068_upload-multiple-files-php.html

Code: [Select]
<form action="upload.php" method="post" enctype="multipart/form-data">
File: <input type="file" name="file[]"/><br/>
File: <input type="file" name="file[]"/><br/>
File: <input type="file" name="file[]"/><br/>
<input type="submit" name="submit" value="Upload"/>
</form>



$destpath = "upload/" ;


while(list($key,$value) = each($_FILES["file"]["name"])) {
if(!empty($value)){
f ($_FILES["file"]["error"][$key] > 0) {
echo "Error: " . $_FILES["file"]["error"][$key] . "<br/>" ;
}
else {
$source = $_FILES["file"]["tmp_name"][$key] ;
$filename = $_FILES["file"]["name"][$key] ;
move_uploaded_file($source, $destpath . $filename) ;
echo "Uploaded: " . $destpath . $filename . "<br/>" ;
}
}
}

Hey guys,

I have an image upload script and it's working fine. But for some files it will not work. It says it can't get the filesize and it can't copy that file. I have tried to change the file format of that file, but with no result. So it's not the file format. Is there anything else that could confuse getfilesize and copy commands in PHP? Can you please tell me what is wrong?

include ("include/session.php");

//Pohranjivanje podataka za 1. sliku

$naziv1 = mysql_real_escape_string($_POST["naziv1"],$veza);
$opis1 = mysql_real_escape_string($_POST["opis1"],$veza);
$album_id = mysql_real_escape_string($_POST["album_id"],$veza);
$datum1 = date("Y-m-d H:i:s");


//Upload slike i thumba
//define a maxim size for the uploaded images 
define ("MAX_SIZE","10000000000"); 

// define the width and height for the thumbnail 
// note that theese dimmensions are considered the maximum dimmension and are not fixed, 
// because we have to keep the image ratio intact or it will be deformed 
define ("WIDTH","200"); 
define ("HEIGHT","150");   

// this is the function that will create the thumbnail image from the uploaded image 
// the resize will be done considering the width and height defined, but without deforming the image 

function make_thumb($img_name,$filename,$new_w,$new_h) { 

//get image extension. 
$ext=getExtension($img_name); 
//creates the new image using the appropriate function from gd library 

if(!strcmp("jpg",$ext) || !strcmp("jpeg",$ext)) $src_img=imagecreatefromjpeg($img_name);   
if(!strcmp("png",$ext)) $src_img=imagecreatefrompng($img_name);  
if(!strcmp("gif",$ext)) $src_img=imagecreatefromgif($img_name);

//gets the dimmensions of the image 

$old_x=imageSX($src_img); $old_y=imageSY($src_img);   

// next we will calculate the new dimmensions for the thumbnail image 
// the next steps will be taken: 
// 1. calculate the ratio by dividing the old dimmensions with the new ones 
// 2. if the ratio for the width is higher, the width will remain the one define in WIDTH variable 
// and the height will be calculated so the image ratio will not change 
// 3. otherwise we will use the height ratio for the image 
// as a result, only one of the dimmensions will be from the fixed ones 

$ratio1=$old_x/$new_w; $ratio2=$old_y/$new_h;

if($ratio1>$ratio2) { $thumb_w=$new_w; $thumb_h=$old_y/$ratio1; } else { $thumb_h=$new_h; $thumb_w=$old_x/$ratio2; }   

// we create a new image with the new dimmensions 

$dst_img=ImageCreateTrueColor($thumb_w,$thumb_h);   

// resize the big image to the new created one 

imagecopyresampled($dst_img,$src_img,0,0,0,0,$thumb_w,$thumb_h,$old_x,$old_y);   

// output the created image to the file. Now we will have the thumbnail into the file named by $filename

if(!strcmp("png",$ext)) imagepng($dst_img,$filename); else imagejpeg($dst_img,$filename);   

//destroys source and destination images. 
imagedestroy($dst_img); imagedestroy($src_img); }   

// This function reads the extension of the file. 
// It is used to determine if the file is an image by checking the extension. 

function getExtension($str) { $i = strrpos($str,"."); if (!$i) { return ""; } $l = strlen($str) - $i; $ext = substr($str,$i+1,$l); return $ext; }   

// This variable is used as a flag. The value is initialized with 0 (meaning no error found) 
//and it will be changed to 1 if an errro occures. If the error occures the file will not be uploaded. 

$errors=0; 

// checks if the form has been submitted 

if(isset($_POST['spremi'])) { 

//reads the name of the file the user submitted for uploading 

$image=$_FILES['slika1']['name']; 

// if it is not empty 

if ($image) { 

// get the original name of the file from the clients machine 

$filename = stripslashes($_FILES['slika1']['name']); 

// get the extension of the file in a lower case format 

$extension = getExtension($filename); $extension = strtolower($extension); 


// if it is not a known extension, we will suppose it is an error, print an error message 
//and will not upload the file, otherwise we continue 

if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif")) { echo '<h1>Unknown extension!</h1>'; $errors=1; } else { 

// get the size of the image in bytes 
// $_FILES[\'image\'][\'tmp_name\'] is the temporary filename of the file in which the uploaded file was stored on the server 

$size=getimagesize($_FILES['slika1']['tmp_name']); 
$sizekb=filesize($_FILES['slika1']['tmp_name']);   


//compare the size with the maxim size we defined and print error if bigger 

if ($sizekb > MAX_SIZE*1024) { echo '<h1>You have exceeded the size limit!</h1>'; $errors=1; }   

//we will give an unique name, for example the time in unix time format 

$image_name1=mt_rand(0,9999999).'.'.$extension; 

//the new name will be containing the full path where will be stored (images folder) 

$newname="slike_natjecanja/".$image_name1; 
$copied = copy($_FILES['slika1']['tmp_name'], $newname); 

//we verify if the image has been uploaded, and print error instead 

if (!$copied) { echo '<h1>Copy unsuccessfull!</h1>'; $errors=1; } else { 

// the new thumbnail image will be placed in images/thumbs/ folder 

$thumb_name='slike_natjecanja/thumbs/thumb_'.$image_name1; 
$thumb_name1 = 'thumb_'.$image_name1;

// call the function that will create the thumbnail. The function will get as parameters 
//the image name, the thumbnail name and the width and height desired for the thumbnail 

$thumb=make_thumb($newname,$thumb_name,WIDTH,HEIGHT); }} }} 

//If no errors registred, print the success message and show the thumbnail image created 
if(isset($_POST['Submit']) && !$errors) { echo "<h1>Thumbnail created Successfully!</h1>"; echo '<img src="'.$thumb_name.'">'; }


if (empty($_FILES['slika1']['name'])) {
    
    echo "Prazno je!";
    die;
    
    } else {
             
    //Ubacivanje u bazu
    $upit = "INSERT INTO natjecanja_slike_sve (album_id, naziv_slike, opis_slike, datum_dodavanja_slike, slika_nat_mala, slika_nat_velika) VALUES ('$album_id', '$naziv1', '$opis1', '$datum1', '$thumb_name1', '$image_name1')";
    echo "$upit";
    die;
    $rezultat = mysql_query($upit) or die (mysql_error());
    
}

Hi i have the script to upload files i set the type of file and extension allowed all the files type and extension i can upload except mp4 is ther anything extra i need to do isnt file type (video/mp4) extension (mp4) but still not working.
Code: [Select]
<?php
mysql_connect("localhost", "root", "") or die(mysql_error()) ;
mysql_select_db("database_name") or die(mysql_error()) ;

// my file the name of the input area on the form type is the extension of the file
//echo $_FILES["myfile"]["type"];

//myfile is the name of the input area on the form 
$name = $_FILES["image"]["name"]; // name of the file
$type = $_FILES["image"]["type"]; //type of the file
$size = $_FILES["image"]["size"]; //the size of the file
$temp = $_FILES["image"]["tmp_name"];//temporary file location when click upload it temporary stores on the computer and gives it a temporary name

$error =array(); // this an empty array where you can then call on all of the error messages
$allowed_exts = array('jpg', 'jpeg', 'png', 'gif','avi','mp4'); // array with the following extension name values
$image_type = array('image/jpg', 'image/jpeg', 'image/png', 'image/gif', 'video/mp4'); // array with the following image type values
$location = 'images/'; //location of the file or directory where the file will be stored
$appendic_name = "news".$name;//this append the word [news] before the name so the image would be news[nameofimage].gif

// substr counts the number of carachters and then you the specify how how many you letters you want to cut off from the beginning of the word example drivers.jpg it would cut off dri, and would display vers.jpg
//echo $extension = substr($name, 3);

//using both substr and strpos, strpos it will delete anything before the dot in this case it finds the dot on the $name file deletes and + 1 says read after the last letter you delete because you want to display the letters after the dot. if remove the +1 it will display .gif which what we want is just gif
$extension = strtolower(substr($name, strpos ($name, '.') +1));//strlower turn the extension non capital in case extension is capital example JPG will strtolower will make jpg
// another way of doing is with explode
// $image_ext strtolower(end(explode('.',$name))); will explode from where you want in this case from the dot adn end will display from the end after the explode

$title = $_POST["title"];
$subtitle = $_POST["subtitle"];

     if (isset($image)) // if you choose a file name do the if bellow
       {
       
       // if extension is not equal to any of the variables in the array $allowed_exts error appears
        if(in_array($extension, $allowed_exts) === false )
       {
         $error[] = 'Extension not allowed! gif, jpg, jpeg, png only<br />'; // if no errror read next if line
       }
        // if file type is not equal to any of the variables in array $image_type error appears
        if(in_array($type, $image_type) === false)
       {
          $error[] = 'Type of file not allowed! only images allowed<br />';     
       }
       
           
       // check if  folder exist in the server
        if(!file_exists ($location))
       {
          $error[] = 'No directory ' . $location. ' on the server Please create a folder ' .$location;     
       }
            
     }
     // if no error found do the move upload function
       if (empty($error)){
           if (move_uploaded_file($temp, $location .$appendic_name))
           {    
    if (move_uploaded_file($temp1, $location .$name1))
           {
             // insert data into database first are the field name teh values are the variables you want to insert into those fields appendic is the new name of the image
mysql_query("INSERT INTO tablename (title, subtitle, image)
 VALUES ('$title', '$subtitle', '$appendic_name')") ;
 echo $type;
  echo "<br />";
 echo $type1;


           }
         }
       else
          {
        foreach ($error as $error)
           {
               echo $error;
           }
        }
      
   }
  
//echo $type;
?>

Hi, ive recently created a gallery website and im happy with the way everything currently works. However the main drawback is the site uploads using a html webfom which is great for remote users or the odd image.

However, as i want to mass upload my existing collection i will need the ability to read a selected folder and then to carry out all the same processes that existed from the existing html form upload.

Im also using gdlibrary and checking file types to ensure they are within my allowed list, but im wondering if there are any other common security alerts i should be aware of to keep things a little bit safer if/when i publish outside of my LAN.

So in a nut shell i need some assistance with changing my upload process to work for more than one file at a time, ideally by reading a folder, or at least reading X amount of files at a time - processing them then moving onto next batch of files in the list.  Then the next part i need help with is checking/improving basic security of the system

Code: [Select]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Untitled Document</title>
</head>
<body>
<?php
$hostname='xxx';
$username='xxx';
$password='xxx';
$dbname='xxx;
$usertable=xxx;


$myconn=mysql_connect($hostname,$username, $password) OR DIE ('Unable to connect to database! Please try again later.');

if ((($_FILES["file"]["type"] =="image/gif")
|| ($_FILES["file"]["type"] =="image/jpeg")
|| ($_FILES["file"]["type"] == "image/png"))
&& ($_FILES["file"]["size"]< 200000))
{
if ($_FILES["file"]["error"] >0)
{
echo "Return Code: " . $_FILES["file"]["error"] . "<br/>";
}
else
{
if (file_exists("uploads/" . $_FILES["file"]["name"]))
{
echo "File already exists. Choose another name.";
}
else
{
move_uploaded_file($_FILES["file"]["tmp_name"],"uploads/" . $_FILES["file"]["name"]);
}
}
}
else
{
echo "Invalid file";
}
$path="uploads/" . $_FILES["file"]["name"];
$desc=$_POST["desc"];
if (!myconn)
{
die ('Could not connect: ' . $mysql_error());
 } 
 $db_selected=mysql_select_db('xxx',$myconn);
 if (!$db_selected) {
    die ('Can\'t use xxxx : ' . mysql_error());
} 
  mysql_query("INSERT INTO partners (desc,photopath,state) VALUES ('$desc','$path','$state')");
  mysql_close($myconn);
?>
</body>
</html>

I have looked around all overr, but cant find what im looking for. Everything I have found is about uploading multile files, what I need to do is upload one file and copy it so there is 3 files.

Here is an example of what I need to accomplish.

Upload file picture1.jpg

From picture1.jpg create 3 files - smallimage_picture1.jpg, largeimage_picture1.jpg & smallimage_picture1_thumb.jpg

Each file will need to be copied to a /products directory and also an entry for each file name placed in mysql database table.

I don't think this is as simple as it sounds to do in PHP, but i am very willing to learn so if anyone knows of a good tutorial that get get me started that would be super.

regards

DB