PHP - Geoip Image Script Not Functioning Correctly - Shows Multiple Images

Code: [Select]
<?php
ob_start();
session_start();

require_once ("functions.php");

$returnurl = urlencode(isset($_GET["returnurl"])?$_GET["returnurl"]:"");
if($returnurl == "")
$returnurl = urlencode(isset($_POST["returnurl"])?$_POST["returnurl"]:"");

$do = isset($_GET["do"])?$_GET["do"]:"";

$do = strtolower($do);

switch($do)
{
case "":
if (checkLoggedin())
{include("usernav.php");?>
<h3>User Logged In</h3>
<p>This is the members only area.</p>
<?php } else {?>

<a name="User Panel"></a>
<h1>User Panel</h1>
<h3>User Login</h3>
<form name="login" action="login.php?do=login" method="POST" onsubmit="return aValidator();">
<input type="hidden" name="returnurl" value="<?$returnurl?>">
<table cellPadding=3 width=225 border=1>
<tr>
<td colSpan=2>
<center>
<p><b>Members-Only Area!</b></font></p>
</center></td></tr>
<tr>
<td align=center width=70>Username:</td>
<td><input type="text" name="username"></td></tr>
<tr>
<td align=center width=70>Password:</td>
<td><input type="password" name="password"></font></td></tr>
<tr>
<td align=middle colspan=2>
<input type="submit" name="submit" value="Login"></td></tr>
<td align=middle colSpan=2>
<input type="checkbox" name="remme" value="on">&nbsp;Remember me for the next time I visit</td>
</form></table></td>
<?php
}
break;
case "login":
$username = isset($_POST["username"])?$_POST["username"]:"";
$password = isset($_POST["password"])?$_POST["password"]:"";

if ($username=="" or $password=="" )
{
echo "<h1>Username or password is blank</h1>";//this does not show when the input(s) are blank
clearsessionscookies();
header("location: index.php?returnurl=$returnurl");
}
else
{
if(confirmuser($username,$password))
{
createsessions($username,$password);
if ($returnurl<>"")
header("location: $returnurl");
else
{
header("Location: index.php");
}
}
else
{
echo "<h1>Invalid Username and/Or password</h1>";//this message does not show when the user login invalid
clearsessionscookies();
header("location: index.php?returnurl=$returnurl");
}
}
break;
case "logout":
clearsessionscookies();
header("location: index.php");
break;
}
?>
What maybe the case, could anyone help me with this?
Thanks Ted.

Hi all,

I'm currently using Maxminds geoip and geoipcity databases to determine the users country but it struggles to determine if a visitor is from Northern Ireland (it just shows them as United Kingdom).
Has anyone got (any) GeoIP to accurately determine Northern Ireland visitors?

Thanks

I am using the following css  

.content {
    min-height: 850px;
    color: #CCC;
    padding-right: 320px;
    background-image:url(../images/wheelie.png);
    background-repeat: no-repeat;
    background-position: right bottom;
}

however the background image only shows in the desktop version of safari, I have checked firefox and chrome and mobile safari.   I can't see why.

Hiya peeps!

I have built this.


<?php

class extract {

private $link;
private $rec;

public function __construct() {

}

public function __init($link, $rec = 0) {

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,$link);
curl_setopt($ch, CURLOPT_TIMEOUT, 50);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$this->_data = curl_exec($ch);
curl_close($ch);

$this->_emails = array();

if($rec == 1) {
if(preg_match_all('/((?:http|https):\/\/(?:www\.)*(?:[a-zA-Z0-9_\-]{1,15}\.+[a-zA-Z0-9_]{1,}){1,}(?:[a-zA-Z0-9_\/\.\-\?\&\:\%\,\!\;]*))/', $this->_data, $urls)) {
foreach($urls[0] as $k => $v) {
$this->__init($v, 1);
}
}
}

return $this->emails();
}

public function emails() {
if(preg_match_all('/(\w+\.)*\w+@(\w+\.)*\w+(\w+\-\w+)*\.\w+/', $this->_data, $emails, PREG_SET_ORDER)) {
foreach($emails as $dk => $dv) {
foreach($dv as $fk => $fv) {
if(preg_match('/^[^@]+@[a-zA-Z0-9._-]+\.[a-zA-Z]+$/', $fv)) {
$this->_emails[] = $fv;
}
}
}
}
return $this->_emails;
}

public function multi_unique($array) {
foreach ($array as $k => $na) {
$new[$k] = serialize($na);
$uniq = array_unique($new);
}
        
foreach($uniq as $k => $ser) {
$new1[$k] = unserialize($ser);
}

return $new1;
}
}
$go = new extract();
$done = $go->__init($_POST['site'], $_POST['deep']);
print_r($done);
?>
<center><form action="#" method="post">
Site:<br /><input type="text" name="site"><br /><br />
Go-Deep:<br /><select name="deep"><option value="0" selected>No</option><option value="1">Yes</option></select><br /><br />
<input type="submit" name="submit">
</form></center>


It works, but only on one URL, I have setup a html page containing an email address and a link to another page containing an email address, so technically it should return two email addresses. But it doesn't, it only displayed the email address on the url that is inputted.

Does anyone have any idea why?

Many thanks,

James.

Ok Here is my Problem the following works great except it does not add the $user var to the account_details. As well as outputs md5 wrong it outputs something but its different than the password should be.

Heres my PHP code:

Code: [Select]
<?php
session_start();
/**
 * @author Brian T. Flores
 * @copyright 2010 - 2014
 */
error_reporting(E_ALL);



$conn = mysql_connect($db_host, $db_user, $db_pass) or die ('Error connecting to mysql');


mysql_select_db($db_name);


    
    if($_GET['goahead']==1){ // If GoAhead Is set
      
    if(isset($_GET['user'])){ // If isset GoAhead
        $user = mysql_real_escape_string($_GET['user']); // Clean User for Transfer.
        
        
        
        $user_check = mysql_query("SELECT * FROM `account_details` WHERE `username01` = '$user'"); // Check to see if username is taken.
        $ucount = mysql_num_rows($user_check); // Get Username Check Count
                      
                        if($ucount!=""){ // If Username is Taken.
                        
                        die(3); // Die Error Number 3
                        
                    } // End If Username is Taken.
                    
        if(isset($_GET['pass'])){ // If password is set.
            $pass = mysql_real_escape_string($_GET['pass']);  // Clean Password for Transfer.
            $encPass = md5($pass); // Encrypt Password
            
            if(isset($_GET['race'])){// If Race is Set.
                
                $race = mysql_real_escape_string($_GET['race']); // Clean Race for Transfer.
                
                if(isset($_GET['email'])){ // If Email is set.
                    
                    $email = mysql_real_escape_string($_GET['email']); // Clean Email for Transfer.
                    $email_check = mysql_query("SELECT * FROM `account_details` WHERE `email` = '$email'");// Check to see if Email is Taken.
                    $ecount = mysql_num_rows($email_check); //  Get Email Check Count.
                    if($ecount!=""){ // If Email is Taken. 
                        
                        die(2); // Die Error Number 2
                        
                    } // End If Email is Taken.
                    
                    if(isset($_GET['email2'])){ // If email confirmation is set.
                        $email2 = mysql_escape_string($_GET['email2']); // Clean Email Confirmation for Transfer.
                        
                        if($email == $email2){ // If emails match.
                            
                            if(isset($_GET['planet'])){ // If Planet Name is Set.
                            $pname = mysql_real_escape_string($_GET['planet']); // Clean Planet Name for Transfer. 
                           if(isset($_GET['security_code'])){ // If Security Code Input is set.
                            
                            $security_code = mysql_real_escape_string($_GET['security_code']); // Clean Security Code.
                            $security_enc = md5($security_code); // Encrypt Security Code.
                            
                            $security_code2 = $_SESSION['image_random_value']; // Get Security Code Session
                            if($security_enc == $security_code2){ // If Codes Match.
                                $randActive = rand(11111111111111111111,99999999999999999999); // Get Activation Link pre-encrypt.
                                $activation_link = md5($randActive); // Get Encrypted Activation Link.
                                

$q = "INSERT INTO `account_details` (`username01`, `password01`, `loggedIn`, `currentlyLogged`, `active`, `activelink`, `race`, `email`) VALUES ('$user', '$encPass', 0, 0, 0, '$activation_link', '$race', '$email');";
// ^ Add Account Query.

$res = mysql_query($q) or die("Error Detected! <br />".mysql_error());
// ^ Add Account to SQL.
                                
$q = mysql_query("SELECT * FROM `account_details` WHERE `username01` = '$user'")or die(mysql_error());
// ^ Get Information from New Account.

$newuserinfo = mysql_fetch_array($q);// Get New User Information

$id = $newuserinfo['id']; // Set New Account Id.

$q="INSERT INTO `planets` (`owner`, `name`, `recource1`, `recource2`, `recource3`, `recource4`, `recource5`, `turns_01`, `untrained_units_01`, `attackers_01`, `defenders_01`, `miners_01`, `covert_01`, `anticovert_01`, `ship_01`, `ship_02`, `ship_03`, `ship_04`, `ship_05`, `ship_06`, `ship_07`, `building01`, `building02`, `building03`, `building04`, `building05`, `building06`, `building07`, `building08`, `building09`) VALUES ('$id', '$pname', 35000, 15000, 12000, 135000, 125000, 220, 150, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0);";
// ^ Add Planet Query.
$res2 = mysql_query($q) or die("Error Detected! <br />".mysql_error()); // Add Planet to SQL.


 $body = "
 Hello ".$user.",
  
  Congradulations! Your account on Ultimate Conquest has been Registed Today!
  
  Click the following Link to Activate Account:
  http://testing.ultimateconquest.net/activate.php?code=".$activation_link."
  
  If you have not registered an account and have found this message in error please click the following link to report this error:
  
  http://testing.ultimateconquest.net/errorreg.php?account=".$user."

Thank you for registering for Ultimate Conquest - ULC,
Head Admin Brian Flores AKA Photonic....
 "; // Activation Email Information.
 
 if (mail($email, "Activate your ULC Ultimate Conquest Account! No-Reply!", $body)) { // If Email Is Sent.
    
die("1"); // Die Error Number 1

} // End Send Email   

}else{ // If Security Codes do Not Match.
        die("12"); // Die Error Number 12
    }
    }else{ // If Security Code is Not Set
        die("11"); // Die Error Number 13
    }
    }else{ // If Planet Name is Not Set.
        die("10"); // Die Error Number 10.
    }
    }else{ // If Emails do not match.
        die("9"); // Die Error Number 9.
    } 
    }else{ // If email confirmation is not set.
        die("8"); // Die Error Number 8.
    }
    }else{ // If email is not set.
        die("7"); // Die Error Number 7.
    }
    }else{ // If race is not set.
        die("6"); // Die Error Number 6.
    }
    }else{ // If Password is not set.
        die("5"); // Die Error Number 5.
    }
    }else{ // If Username is not set.
        die("4"); // Die Error Number 4.
    }
    }else{ // If GoAhead is Not Set.
    die("Go Ahead Not Established By Game System!");
}


?>

Here is the Register Function in Javascript:

Code: [Select]
  function regMast(){
    var user = document.getElementById('username_client').value;
    var pass = document.getElementById('password_client').value;
    var race1 = document.getElementById('races1').value;
    if(race1 !=""){var race = document.getElementById('races1').value;}
    var race2 = document.getElementById('races2').value;
    if(race2 !=""){var race = document.getElementById('races2').value;}
    var race3 = document.getElementById('races3').value;
    if(race3 !=""){var race = document.getElementById('races3').value;}
    var race4 = document.getElementById('races4').value;
    if(race4 !=""){var race = document.getElementById('races4').value;}
    var planet_name = document.getElementById('pname').value;
    var email = document.getElementById('email').value;
    var email2 = document.getElementById('email2').value;
    var security_code = document.getElementById('security_code').value;
   
    var ajaxRequest;  // The variable that makes Ajax possible!

try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
    // Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function(){
if(ajaxRequest.readyState == 4){
var returni = ajaxRequest.responseText;
           
            if(returni == "1"){
                document.getElementById('reg_error').innerHTML = 'Registration Completed! Check Activation Email for more information.';
            }
            if(returni == "2"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Email Address Already Taken!';
            }
            if(returni == "3"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Username Already Taken!';
            }
            if(returni == "4"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Username Field Empty!';
            }   
            if(returni == "5"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Password Field Empty!';
            }
            if(returni == "6"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! You must select a race!';
            }
            if(returni == "7"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Email Field Empty!';
            }     
            if(returni == "8"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Email Confirmation Field Empty!';
            }   
            if(returni == "9"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Emails did not Match!';
            }   
            if(returni == "10"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Planet Name Field Empty!';
            }
            if(returni == "11"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! You did not Input the Security Code!';
            }
            if(returni == "12"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! The Security Code you Inputed did not Match the Image!';
            }else{
              document.getElementById('reg_error').innerHTML = returni; 
            }                                                 
}
}
var queryString = "?goahead=1&user=" + user + "&pass=" + pass + "&race=" + race + "&email=" + email + "&email2=" + email2 + "&security_code=" + security_code + "&planet=" + planet_name;
ajaxRequest.open("GET", "register.php" + queryString, true);
ajaxRequest.send(null);
   
}

I am trying to develop a browser interface for an embedded system.  The code written so far consists of one HTML page and one PHP script.  The HTML page creates a form containing a select widget and a submit button.  When the submit button is pressed, the selected item is posted to the PHP script for processing.  The PHP script does a MySQL query using the form data and generates HTML to display the query result in a table, which displays in a new Web page.  All of this works fine.  However...

I need to change the HTML page to create the select widget choices using a the result of a query run when the HTML page gets displayed.  I created a PHP script to do this, and included it in my HTML page in this manner:

Code: [Select]
<form action="procSomeForm.php" method="post">
    <?php
          include "genSelectList.php";
    ?>
   <input class="main" type="submit" name="submit[view]" value="View" style="width:70px"/>
</form>

When I tried this, the select didn't appear.  I tried moving the <select> </select> out of the PHP script and placing them around the "include".  The select now displayed but with no contents.  After many failed attempts to resolve any errors in the script, I began to suspect that the browser was ignoring the include directive.  I then reduced the problem to this trivial code:

Code: [Select]
<html>
<head>
<title>PHP Test</title>
</head>

<body>
    <?php
        include "tmp.php";
        echo "<p>This message brought to you by PHP!</p>";
    ?>

</body>
</html>

The PHP script looks like this:

Code: [Select]
<?php
echo "<p>Hello from tmp.php!</p>";
?>

My Web browser rendered the result as:

Code: [Select]
This message brought to you by PHP!

";?>

The "hello" message in tmp.php wasn't displayed, and the the browser printed the last few characters of the embedded PHP statement as if they were simple text!

I have tried this same experiment on two PCs with the same result.  My development PC runs Debian 6.0 (Squeeze) in VMWare on top of WinXP; I access the Web pages locally from within VMWare using IceWeasel.  My embedded PC also runs Debian 6.0; I access the Web pages  from my WinXP box using Firefox.  Interestingly, when I use IE8 to call up the trivial page from the embedded PC, it displays a blank page!

Sorry for the long-winded setup to the problem, but I wanted to point out that generating a separate HTML page from a PHP script works; it appears that the issue is with putting PHP statements in an HTML page.

Any help will be greatly appreciated - thanks in advance!

Chris

Here is my code:
// Start MySQL Query for Records
$query = "SELECT codes_update_no_join_1b" .
"SET orig_code_1 = new_code_1,
       orig_code_2 = new_code_2" .
"WHERE concat(orig_code_1, orig_code_2) = concat(old_code_1, old_code_2)";
$results = mysql_query($query) or die(mysql_error());
// End MySQL Query for Records


This query runs perfectly fine when run direct as SQL in phpMyAdmin, but throws this error when running in my script??? Why is this???

Code: [Select]
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '= new_code_1, orig_code_2 = new_code_2WHERE concat(orig_code_1, orig_c' at line 1

Well the subject line is pretty explicit.  I found this script that uploads a picture onto a folder on the server called images, then inserts the the path of the image on the images folder onto a VACHAR field in a database table. 
Code: [Select]




<?php

//This file inserts the main image into the images table.

//address error handling

ini_set ('display_errors', 1);
error_reporting (E_ALL & ~E_NOTICE);





//authenticate user
//Start session
session_start();

       
        //Connect to database
require ('config.php');

//Check whether the session variable id is present or not. If not, deny access.
if(!isset($_SESSION['id']) || (trim($_SESSION['id']) == '')) {
header("location: access_denied.php");
exit();
}

        else{ 







// Check to see if the type of file uploaded is a valid image type

function is_valid_type($file)

{

     // This is an array that holds all the valid image MIME types

     $valid_types = array("image/jpg", "image/jpeg", "image/bmp", "image/gif");

 

     if (in_array($file['type'], $valid_types))

         return 1;

     return 0;

}

 

// Just a short function that prints out the contents of an array in a manner that's easy to read

// I used this function during debugging but it serves no purpose at run time for this example

function showContents($array)

{

     echo "<pre>";

     print_r($array);

     echo "</pre>";

}

 

// Set some constants

 

// This variable is the path to the image folder where all the images are going to be stored

// Note that there is a trailing forward slash

$TARGET_PATH = "images/";

 

// Get our POSTed variable

$image = $_FILES['image'];

 

// Sanitize our input

$image['name'] = mysql_real_escape_string($image['name']);

 

// Build our target path full string.  This is where the file will be moved to

// i.e.  images/picture.jpg

$TARGET_PATH .= $image['name'];

 

// Make sure all the fields from the form have inputs

if ( $image['name'] == "" )

{

     $_SESSION['error'] = "All fields are required";

     header("Location: member.php");

     exit;

}

 

// Check to make sure that our file is actually an image

// You check the file type instead of the extension because the extension can easily be faked

if (!is_valid_type($image))

{

     $_SESSION['error'] = "You must upload a jpeg, gif, or bmp";

     header("Location: member.php");

     exit;

}

 

// Here we check to see if a file with that name already exists

// You could get past filename problems by appending a timestamp to the filename and then continuing

if (file_exists($TARGET_PATH))

{

     $_SESSION['error'] = "A file with that name already exists";

     header("Location: member.php");

     exit;

}

 

// Lets attempt to move the file from its temporary directory to its new home

if (move_uploaded_file($image['tmp_name'], $TARGET_PATH))

{

     // NOTE: This is where a lot of people make mistakes.

     // We are *not* putting the image into the database; we are putting a reference to the file's location on the server

     $sql = "insert into images (member_id, image_cartegory, image_date, image) values ('{$_SESSION['id']}', 'main', NOW(), '" . $image['name'] . "')";

     $result = mysql_query($sql) or die ("Could not insert data into DB: " . mysql_error());

     header("Location: images.php");

echo "File uploaded";

     exit;

}

else

{

     // A common cause of file moving failures is because of bad permissions on the directory attempting to be written to

     // Make sure you chmod the directory to be writeable

     $_SESSION['error'] = "Could not upload file.  Check read/write persmissions on the directory";

     header("Location: member.php");

     exit;

}







        } //End of if session variable id is not present.
 


?> 


The script seems to work fine because I managed to upload a picture which was successfully inserted into my images folder and into the database.
Now the problem is, I can't figure out exactly how to write the script that displays the image on an html page. I used the following script which didn't work.


Code: [Select]

//authenticate user
//Start session
session_start();

       
        //Connect to database
require ('config.php');

$sql = mysql_query("SELECT* FROM images WHERE member_id = '".$_SESSION['id']."' AND image_cartegory = 'main' ");
$row = mysql_fetch_assoc($sql);
$imagebytes = $row['image'];
header("Content-type: image/jpeg");
print $imagebytes;







Seems to me like I need to alter some variables to match the variables used in the insert script, just can't figure out which.  Can anyone help??

hi there
how can i modify this code to let me upload multiple images in database?
thanks

Code: [Select]
/ Start a session for error reporting
session_start();

//Connect to database
require_once('../Connections/connect_to_mysql.php');

//check if the button is pressed
if(isset($_POST['submit'])){
// Check to see if the type of file uploaded is a valid image type
function is_valid_type($file)
{
// This is an array that holds all the valid image MIME types
$valid_types = array("image/jpg", "image/jpeg", "image/bmp", "image/gif", "image/png");

if (in_array($file['type'], $valid_types))
return 1;
    return 0;
}
// This variable is the path to the image folder where all the images are going to be stored
// Note that there is a trailing forward slash
$TARGET_PATH = "adminform_images/";

// Get our POSTed variables
$title = $_POST['title'];
$name = $_POST['name'];
$surname = $_POST['surname'];
$email = $_POST['email'];
$phone = $_POST['phone'];
$city = $_POST['city'];
$comments = $_POST['comments'];
$image = $_FILES['image'];
$price = $_POST['price'];

// Sanitize our inputs
$title = mysql_real_escape_string($title);
$name = mysql_real_escape_string($name);
$surname = mysql_real_escape_string($surname);
$email = mysql_real_escape_string($email);
$phone = mysql_real_escape_string($phone);
$city = mysql_real_escape_string($city);
$comments = mysql_real_escape_string($comments);
$image['name'] = mysql_real_escape_string($image['name']);
$price = mysql_real_escape_string($price);

// Build our target path full string.  This is where the file will be moved do
// i.e.  images/picture.jpg
$TARGET_PATH .= $image['name'];

// Make sure all the fields from the form have inputs
if ( $title == "" || $name == "" || $email == "" || $city == ""  || $comments == "" || $price == ""|| $image['name'] == "" )
{
echo "Te gjithe fushat duhet plotesuar. <a href=login.php>Provo perseri</a>";
exit;
}

// Check to make sure that our file is actually an image
// You check the file type instead of the extension because the extension can easily be faked
if (!is_valid_type($image))
{
echo "Fotografite duhet te jene te formateve jpg, jpeg, bmp, gif, ose png. <a href=login.php>Kthehu prapa</a>";
exit;
}

// Here we check to see if a file with that name already exists
// You could get past filename problems by appending a timestamp to the filename and then continuing
if (file_exists($TARGET_PATH))
{
echo "Ju lutem nderroni emrin e fotos dhe provoni perseri. <a href=login.php>Kthehu prapa</a>";
exit;
}

// Lets attempt to move the file from its temporary directory to its new home
if (move_uploaded_file($image['tmp_name'], $TARGET_PATH))
{
// NOTE: This is where a lot of people make mistakes.
// We are *not* putting the image into the database; we are putting a reference to the file's location on the server
$sql = "INSERT INTO admins_form (title, name, surname, email, phone, city, comments, price, date_added, filename) values ('$title', '$name', '$surname', '$email', '$phone', '$city', '$comments', '$price', now(), '" . $image['name'] . "')";
$result = mysql_query($sql) or die ("Futja e te dhenave ne databaze DESHTOI. <a href=login.php>Provo perseri</a> ");
echo "Shtimi i te dhenave u krye me SUKSES. Klikoni per te shkuar tek <a href=../index.php>faqja kryesore</a>";
exit;
}
else
{
// A common cause of file moving failures is because of bad permissions on the directory attempting to be written to
// Make sure you chmod the directory to be writeable
echo "Shtimi i te dhenave NUK u krye me Sukses. Ju lutem provoni <a href=login.php>perseri</a>";
exit;
}
}

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=309442.0

Hi All

Been desperate to crack this nut for a few years now, but seem to be failing epically!

I have been building a property/real estate web site for a long time, but I have no training and have been learning as I go. I have a script written that allows me to upload data and store it in my database, what I was looking to do was add a section that allows me to upload multiple images at the same time, and store the location to another table in the same database.

So what I was looking to do was remove all the...lets say rubbish to be nice...and see where it takes us.

I apologize in advance for the lack of santized code...I am coding locally only, in an admin area, and will rectify before launching the site...just trying to get the bones of the script in place.

Ok, first we have my form as shown here, warts and all.
<?php
/**
 * Create Listing
 */
 
?>

<div id="admin" class="intern">
    <div class="banner">
      <div class="logbanner">CREATE LISTING</div>
    </div>

<div class="padding">

<form action="adminprocess.php" method="POST" enctype="multipart/form-data">

<table border="0" cellpadding="2" cellspacing="2" width="700">

<tr>

<td align="right"><label class="text">Property Title:&nbsp;</label></td>

<td><input type="text" name="property_title" maxlength="50" value="" size="50"></td>

</tr>

<tr>

<td align="right"><label class="text">Selling Agent:&nbsp;</label></td>

<td><input type="text" name="agent" maxlength="30" value="<?php echo $session->username; ?>"></td>

</tr>

<tr>

<td align="right"><label class="text">Style:&nbsp;</label></td>

<td>

<select id="property_type" name="property_type">

<option value="Not Selected" selected>Not Selected</option>

<option value="Detached">Detached</option>

<option value="Semi-Deatched">Semi-Detached</option>

<option value="End Terrace">End Terrace</option>

<option value="Mid Terrace">Mid Terrace</option>

<option value="Flat">Flat</option>

<option value="Ground Floor Flat">Ground Floor Flat</option>

<option value="4 in a Block">4 in a Block</option>

<option value="Bungalow">Bungalow</option>

<option value="Apartment">Apartment</option>

<option value="Studio">Studio</option>

<option value="Maisonette">Maisonette</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Address:&nbsp;</label></td>

<td><input type="text" name="address_one" maxlength="30" value="" size="50"></td>

</tr>

<tr>

<td align="right"><label class="text">Address:&nbsp;</label></td>

<td><input type="text" name="address_two" maxlength="30" value="" size="50"></td>

</tr>

<tr>

<td align="right"><label  class="text">Town:&nbsp;</label></td>

<td><input type="text" name="town" maxlength="30" value="" size="50"></td>

</tr>

<tr>

<td align="right"><label class="text">County:&nbsp;</label></td>

<td>

<select id="county" name="county">

<option value="Fife" selected>Fife</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Post Code:&nbsp;</label></td>

<td><input type="text" name="postcode" maxlength="30" value="" size="15"></td>

</tr>

<tr>

<td align="right"><label class="text">Price:&nbsp;</label></td>

<td>

<select id="price_cond" name="price_cond">

<option value="Not Selected" selected>Not Selected</option>

<option value="Offers Over">Offers Over</option>

<option value="Fixed Price">Fixed Price</option>

</select>

<input type="text" name="price" maxlength="30" value="" size="32">

</td>

</tr>

<tr>

<td align="right"><label class="text">Property Status:&nbsp;</label></td>

<td>

<select id="status" name="status">

<option value="Not Selected" selected>Not Selected</option>

<option value="Offers Over">For Sale</option>

<option value="Fixed Price">Sold Subject to Signed Missives</option>

<option value="Fixed Price">Sold Subject to Survey</option>

<option value="Fixed Price">Price Reduced</option>

<option value="Fixed Price">Sold</option>

<option value="Fixed Price">Re-Listed</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Description Header:&nbsp;</label></td>

<td><input type="text" name="deschead" maxlength="30" value="" size="50"></td>

</tr>

<tr>

<td align="right"><label class="text">Description:&nbsp;</label></td>

<td><textarea cols="40" rows="8" type="text" name="desc" maxlength="1000" value=""></textarea></td>

</tr>

<!-- I want the images to be added here -->

<tr>

<td align="right"><label class="text">Reception Rooms:&nbsp;</label></td>

<td>

<select id="recrooms" name="recrooms">

<option value="0" selected>Not Selected</option>

<option value="1">1</option>

<option value="2">2</option>

<option value="3">3</option>

<option value="4">4</option>

<option value="5">5</option>

<option value="6">6</option>

<option value="7">7+</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Bedrooms:&nbsp;</label></td>

<td>

<select id="bedrooms" name="bedrooms">

<option value="0" selected>Not Selected</option>

<option value="1">1</option>

<option value="2">2</option>

<option value="3">3</option>

<option value="4">4</option>

<option value="5">5</option>

<option value="6">6</option>

<option value="7">7+</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Bathrooms:&nbsp;</label></td>

<td>

<select id="bathrooms" name="bathrooms">

<option value="0" selected>Not Selected</option>

<option value="1">1</option>

<option value="2">2</option>

<option value="3">3</option>

<option value="4">4</option>

<option value="5">5</option>

<option value="6">6</option>

<option value="7">7+</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Garden:&nbsp;</label></td>

<td>

<select id="garden" name="garden">

<option value="Not Selected" selected>Not Selected</option>

<option value="Yes">Yes</option>

<option value="No">No</option>

<option value="Shared">Shared</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Garage:&nbsp;</label></td>

<td>

<select id="garage" name="garage">

<option value="Not Selected" selected>Not Selected</option>

<option value="Yes">Yes</option>

<option value="No">No</option>

<option value="Shared">Shared</option>

</select>

</td>

</tr>

<tr>

<td align="right"><label class="text">Additional Info:&nbsp;<br />** Not seen by site users **</label></td>

<td><textarea cols="40" rows="8" type="text" name="addinfo" maxlength="1000" value=""></textarea></td>

</tr>

<tr>

<td align="right"><label class="text">&nbsp;</label></td>

<td>

<input type="hidden" name="subcreatelisting" value="1">

<input type="submit" value="Create Listing">

</td>

</tr>

</table>

</form> 
<?php echo $form->error("creListing"); ?>
</div>
</div>

next I have my process page which has the following function included...
  function procCreateListing(){

      global $session, $database, $form;
         $q = "INSERT INTO ".TBL_PROP."(prop_id, prop_agent, prop_type, prop_add_1, prop_add_2, prop_town, prop_county, prop_pc, prop_price, prop_price_cond, prop_rec_rooms, prop_bedrooms, prop_bathrooms, prop_status, prop_garden, prop_garage, prop_description_header, prop_description, prop_add_info, prop_add_date) VALUES ('".$_POST['property_title']."', '".$_POST['agent']."', '".$_POST['property_type']."', '".$_POST['address_one']."', '".$_POST['address_two']."', '".$_POST['town']."', '".$_POST['county']."', '".$_POST['postcode']."', '".$_POST['price']."', '".$_POST['price_cond']."', '".$_POST['recrooms']."', '".$_POST['bedrooms']."', '".$_POST['bathrooms']."', '".$_POST['status']."', '".$_POST['garden']."', '".$_POST['garage']."', '".$_POST['deschead']."', '".$_POST['desc']."', '".$_POST['addinfo']."', '".$_POST['date']."')";
         $database->query($q);


   }

and I have 2 tables in mysql

prop_listing and imagebin
Code: [Select]
CREATE TABLE `kea_userclass`.`prop_listing` (
`prop_id` INT( 10 ) NOT NULL AUTO_INCREMENT ,
`prop_agent` VARCHAR( 40 ) NOT NULL ,
`prop_type` VARCHAR( 20 ) NOT NULL ,
`prop_add_1` VARCHAR( 50 ) NOT NULL ,
`prop_add_2` VARCHAR( 50 ) NOT NULL ,
`prop_town` VARCHAR( 30 ) NOT NULL ,
`prop_county` VARCHAR( 25 ) NOT NULL ,
`prop_pc` VARCHAR( 8 ) NOT NULL ,
`prop_price` INT( 10 ) NOT NULL ,
`prop_price_cond` VARCHAR( 20 ) NOT NULL ,
`prop_rec_rooms` INT( 2 ) NOT NULL ,
`prop_bedrooms` INT( 3 ) NOT NULL ,
`prop_bathrooms` INT( 2 ) NOT NULL ,
`prop_status` VARCHAR( 20 ) NOT NULL ,
`prop_garage` INT( 1 ) NOT NULL ,
`prop_garden` INT( 1 ) NOT NULL ,
`prop_description_header` VARCHAR( 50 ) NOT NULL ,
`prop_description` VARCHAR( 2000 ) NOT NULL ,
`prop_add_info` VARCHAR( 2000 ) NOT NULL ,
`prop_add_date` DATE NOT NULL ,
PRIMARY KEY ( `prop_id` )
) ENGINE = MYISAM ;

CREATE TABLE `imagebin` (
`id` int( 11 ) NOT NULL AUTO_INCREMENT ,
`item_id` int( 11 ) NOT NULL ,
`image` varchar( 255 ) NOT NULL ,
PRIMARY KEY ( `id` ) ) ENGINE = MYISAM DEFAULT CHARSET = latin1;

 
first of all thanks for getting this far, I know it is a lot of reading, and a lot to ask for, but now I am stuck...
I need a section on my form that would allow me to upload 8 images, and store them in a directory folder I need the location saved into my imagebin table thats it just now
Many thanks for reading, and I hope someone can take me under their wing and help me passed this hurdle

Hello,

I am new to PHP coding, and I have some issues trying to upload multiple images into database. The code works only for 1 image, but when I try to add foreach, I receive this message: Warning: Invalid argument supplied for foreach() .

Can anyone help me ?

Problem:
My code is not functioning at all on my form. I would like to see why?

Scripting Info:
Using PHP and MySQL Using offline Server for testing(XAMPP) Using default Server name and login.(localhost,root,[NO PASSWORD]) Database name is reh_temp Table within database is named users 1 Value in table "users" called users
Goal:
My form has 3 inputs. 2-Text and 1-Submit.
The 1st text input has the name of id.
And the 2nd input has the name of table.
In the PHP/MySQL part the values are inputed as follows:

The one with name of "id" gets put into the table users under the users value.
The one with name of "table" creates a new table named after what the user inputs

The rest of the script is just Character Length checks, Exsistance of value checks, Match check, ect.

Here's the code:

Code: [Select]
<?php

            $connect1 = mysql_connect("localhost","root","");
            
            if (!$connect)
               die('Could not connect to the database: ' . mysql_error());

          $id = $_POST['id'];
          $table = $POST['table'];

          //Check for existance
          if (!$id)
               die('You need to type in a session name.');
               else
               {
                if (!$table)
                    die('You need to re-enter you session name.');
               }

          //Check for existance in Database
          mysql_select_db("reh_temp", $connect1);
          
          $q_id = mysql_query("SELECT * FROM users WHERE users='$id'");
          if (mysql_num_rows($q_id)==0)
               {
                //Check Character Length
                if (strlen($id)<4||strlen($table)<4)
                    die('Please enter a session name that is more than 4 characters.');
                    else
                    {
                     //Check for Match
                     if ($id==$table)
                         {
                          //Insert value into users table
                          mysql_select_db("reh_temp", $connect1);
                          $q_id_reg = mysql_query("INSERT INTO users VALUES ('$id')");
                          
                          mysql_select_db("reh_temp", $connect1);
                          $session_table = "CREATE TABLE $table
                          (
                          password varchar(10)
                          )";
                          die ('Thanks!');
                         }
                         else
                         die ('Your session names do not match!');
                    }
               }
               else
               die ('The session name you choose is already in use. Please choose a different one.');
               {

          ?>

     <head>
          <title>ReH-0.1--Create a Session</title>
     </head>

     <body bgcolor="#575757">
         
          <center>
               <font color="#ffffff">Before encrypting your password, a session must be started. We need you to enter a personal session name that you will remember so that you password is protected by this session.</font><br><br>
               <form action="ReH-0.1.php" method="POST">
                    <input type="text" maxlength="10" size="10" name="id"><br>
                    <font color="#ffffff">Please choose a session name.</font><br><br>
                    <input type="text" maxlength="10" size="10" name="table"><br>
                    <font color="#ffffff">Please re-enter you session name.</font><br><br>
                    <input type="submit" value="Create Session">
               </form>
          </center>
         
     </body>
     
               <?php
               }
               echo "I'm Working!";
               ?>
Any help and suggestions would help. Thanks!

Hi   I am developing a website for fun to play around with, like a little fun project and am trying to work out how to upload multiple images that stores the filename in the database and the actual file on the server   I have managed to get it working if I upload just one image but can't work it out for multiple images   Can anyone point me in the right direction or advise where I need to adjust for multiple images upload   I know on the html form on the input tag needs to have multiple and then the name in the input tag be image[] but is as far as I get, it's the PHP I get stuck on   The html for the form is below

<form action="private-add-insert.php" method="post" enctype="multipart/form-data">
Car Make: <input type="text" name="make">
Car Model: <input type="text" name="model">
Exterior Colour: <input type="text" name="exteriorcolour">
Engine Size: <input type="text" name="enginesize">
Fuel Type: <input type="text" name="fueltype">
Year Registered: <input type="text" name="yearregistered">
Transmission: <input type="text" name="transmission">
Mileage: <input type="text" name="mileage">
Number of Doors: <input type="text" name="nodoors">
Body Style: <input type="text" name="bodystyle">
Price: <input type="text" name="price">
<br>
<label>Upload Images</label>
<input type="file" name="image[]" multiple/>
<br />
<input type="hidden" name="MAX_FILE_SIZE" value="100000" />
<br />
<input type="submit" value="Submit Listing"> 
</form>

Below is the PHP coding that processes the html form

<?php
ini_set('display_startup_errors',1);
ini_set('display_errors',1);
error_reporting(-1);
?>

<?php
// Start a session for error reporting
session_start();

// Call our connection file
require("includes/conn.php");

// Check to see if the type of file uploaded is a valid image type
function is_valid_type($file)
{
	// This is an array that holds all the valid image MIME types
	$valid_types = array("image/jpg", "image/jpeg", "image/bmp", "image/gif", "image/png");

	if (in_array($file['type'], $valid_types))
		return 1;
	return 0;
}

// Just a short function that prints out the contents of an array in a manner that's easy to read
// I used this function during debugging but it serves no purpose at run time for this example
function showContents($array)
{
	echo "<pre>";
	print_r($array);
	echo "</pre>";
}

// Set some constants

// This variable is the path to the image folder where all the images are going to be stored
// Note that there is a trailing forward slash
$TARGET_PATH = "private-listing-images/";

// Get our POSTed variables
$make = $_POST['make'];
$model = $_POST['model'];
$exteriorcolour = $_POST['exteriorcolour'];
$enginesize = $_POST['enginesize'];
$fueltype = $_POST['fueltype'];
$yearregistered = $_POST['yearregistered'];
$transmission = $_POST['transmission'];
$mileage = $_POST['mileage'];
$nodoors = $_POST['nodoors'];
$bodystyle = $_POST['bodystyle'];
$price = $_POST['price'];
$image = $_FILES['image'];

// Sanitize our inputs
$make = mysql_real_escape_string($make);
$model = mysql_real_escape_string($model);
$exteriorcolour = mysql_real_escape_string($exteriorcolour);
$enginesize = mysql_real_escape_string($enginesize);
$fueltype = mysql_real_escape_string($fueltype);
$yearregistered = mysql_real_escape_string($yearregistered);
$transmission = mysql_real_escape_string($transmission);
$mileage = mysql_real_escape_string($mileage);
$nodoors = mysql_real_escape_string($nodoors);
$bodystyle = mysql_real_escape_string($bodystyle);
$price = mysql_real_escape_string($price);
$image['name'] = mysql_real_escape_string($image['name']);

// Build our target path full string.  This is where the file will be moved do
// i.e.  images/picture.jpg
$TARGET_PATH .= $image['name'];

// Check to make sure that our file is actually an image
// You check the file type instead of the extension because the extension can easily be faked
if (!is_valid_type($image))
{
	$_SESSION['error'] = "You must upload a jpeg, gif, bmp or png";
	header("Location: private-add-listing.php");
	exit;
}

// Lets attempt to move the file from its temporary directory to its new home
if (move_uploaded_file($image['tmp_name'], $TARGET_PATH))
{
	
	// NOTE: This is where a lot of people make mistakes.
	// We are *not* putting the image into the database; we are putting a reference to the file's location on the server
	$sql = "insert into privatelistings (make, model, exteriorcolour, enginesize, fueltype, yearregistered, transmission, mileage, nodoors, bodystyle, price, filename) values ('$make', '$model', '$exteriorcolour', '$enginesize', '$fueltype', '$yearregistered', '$transmission', '$mileage', '$nodoors', '$bodystyle', '$price', '" . $image['name'] . "')";
	$result = mysql_query($sql) or die ("Could not insert data into DB: " . mysql_error());
	header("Location: private-add-listing-successfully.php?msg=Listing Added successfully");
	exit;
}
else
{
	// A common cause of file moving failures is because of bad permissions on the directory attempting to be written to
	// Make sure you chmod the directory to be writeable
	$_SESSION['error'] = "Could not upload file.  Check read/write persmissions on the directory";
	header("Location: private-add-listing.php");
	exit;
}
?>

I know the coding needs updating to mysqli and prevent sql injections but want to get it working first and then will do them parts   Thank you in advance   Kind regards   Ian

I created scripting to upload multiple images simultaneously.

The files sizes allowed for upload are 2 MB (or larger) and are then resized to approx 300kb each.

In testing, I have discovered that the uploading terminated after 20 images.

Is there a variable that needs to be re-defined in order to easily allow uploads of several hundred images?

PS: I've seen several conflicting examples for defining max_file_size. What is the correct math to define this parameter?