PHP - Uploading Errors

Hi guys

Im trying to create a form which allows me to insert records into my database, and upload an image, the name of which will be stored in the database.

I have the following code which inserts all the data into the db, except the image name and the image isnt uploaded either

Code: [Select]
<?php require_once('../Connections/pwnedbookv4.php'); ?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  if (PHP_VERSION < 6) {
    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
  }

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
  $insertSQL = sprintf("INSERT INTO Games (gametitle, info, genre, releasedate, format) VALUES (%s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['gametitle'], "text"),
                       GetSQLValueString($_POST['info'], "text"),
                       GetSQLValueString($_POST['genre'], "text"),
                       GetSQLValueString($_POST['releasedate'], "date"),
                       GetSQLValueString($_POST['format'], "text"));

  mysql_select_db($database_pwnedbookv4, $pwnedbookv4);
  $Result1 = mysql_query($insertSQL, $pwnedbookv4) or die(mysql_error());
}
?>
<form action="<?php echo $editFormAction; ?>" method="post" enctype="multipart/form-data" name="form1" id="form1">
    <table align="center">
      <tr valign="baseline">
        <td nowrap="nowrap" align="right">Gametitle:</td>
        <td><input name="gametitle" type="text" value="" size="50" maxlength="50" /></td>
      </tr>
      <tr valign="baseline">
      <?php
//define a maxim size for the uploaded images in Kb
 define ("MAX_SIZE","100"); 

//This function reads the extension of the file. It is used to determine if the file  is an image by checking the extension.
 function getExtension($str) {
         $i = strrpos($str,".");
         if (!$i) { return ""; }
         $l = strlen($str) - $i;
         $ext = substr($str,$i+1,$l);
         return $ext;
 }

//This variable is used as a flag. The value is initialized with 0 (meaning no error  found)  
//and it will be changed to 1 if an errro occures.  
//If the error occures the file will not be uploaded.
 $errors=0;
//checks if the form has been submitted
 if(isset($_POST['Submit'])) {
 if($_POST['Submit'] == ""){
 // submit empty
 die ("you must include a picture");
 }
  //reads the name of the file the user submitted for uploading
  $image=$_FILES['image']['name'];
  //if it is not empty
  if ($image) 
  {
  //get the original name of the file from the clients machine
  $filename = stripslashes($_FILES['image']['name']);
  //get the extension of the file in a lower case format
   $extension = getExtension($filename);
  $extension = strtolower($extension);
  //if it is not a known extension, we will suppose it is an error and will not  upload the file,  
//otherwise we will do more tests
 if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif")) 
  {
//print error message
  echo '<h1>Unknown extension!</h1>';
  $errors=1;
  }
  else
  {
//get the size of the image in bytes
 //$_FILES['image']['tmp_name'] is the temporary filename of the file
 //in which the uploaded file was stored on the server
 $size=filesize($_FILES['image']['tmp_name']);

//compare the size with the maxim size we defined and print error if bigger
if ($size > MAX_SIZE*1024)
{
echo '<h1>You have exceeded the size limit!</h1>';
$errors=1;
}

//we will give an unique name, for example the time in unix time format
$image_name=time().'.'.$extension;
//the new name will be containing the full path where will be stored (images folder)
$newname="coverart/".$image_name;

//Writes the information to the database
mysql_query("UPDATE Games SET cover = '$image_name' WHERE gametitle= '$gametitle'");

//we verify if the image has been uploaded, and print error instead
$copied = copy($_FILES['image']['tmp_name'], $newname);
if (!$copied) 
{
echo '<h1>Copy unsuccessfull!</h1>';
$errors=1;
}}}}

 ?>
        <td nowrap="nowrap" align="right">Cover:</td>
        <td><input type="file" name="image"></td></td>
      </tr>
      <tr valign="baseline">
        <td nowrap="nowrap" align="right">Info:</td>
        <td><input name="info" type="text" value="" size="50" /></td>
      </tr>
      <tr valign="baseline">
        <td nowrap="nowrap" align="right">Gen </td>
        <td><input type="text" name="genre" value="" size="50" /></td>
      </tr>
      <tr valign="baseline">
        <td nowrap="nowrap" align="right">Releasedate:</td>
        <td><input type="text" name="releasedate" value="" size="50" /></td>
      </tr>
      <tr valign="baseline">
        <td nowrap="nowrap" align="right">Format:</td>
        <td><input type="text" name="format" value="" size="50" /></td>
      </tr>
      <tr valign="baseline">
        <td nowrap="nowrap" align="right">&nbsp;</td>
        <td><input type="submit" value="Submit" /></td>
      </tr>
    </table>
    <input type="hidden" name="MM_insert" value="form1" />
  </form>
Can anybody see what im missing?

Hi,

This is my first post of PHP Freaks and your help would be greatly appreciated.

I am currently creating a pinball fansite and I am having a really big problem. I have a page where users can input a pinball machine into my mysql database. Below is the code for this.

The question I am asking is how do I edit this script so that I can upload an image with it?

I have gone through various tutorials for days and days and days but cant seem to make it work with the code I have below.

PLEASE CAN YOU HELP??

I have the following code for creating the pinball machine...

Code: [Select]
<?php
//create_topic.php
include 'connect.php';
include 'header.php';

echo '<h2>Create a Pinball Machine</h2>';
if($_SESSION['signed_in'] == false)
{
   //the user is not signed in
   echo 'Sorry, you have to be <a href="signin.php">signed in</a> to create a pinball machine.';
}
else
{
   //the user is signed in
   if($_SERVER['REQUEST_METHOD'] != 'POST')
   {   
      //the form hasn't been posted yet, display it
      //retrieve the categories from the database for use in the dropdown
      $sql = "SELECT
               cat_id,
               cat_name,
               cat_description
            FROM
               categories_pinballmachines";
      
      $result = mysql_query($sql);
      
      if(!$result)
      {
         //the query failed, uh-oh :-(
         echo 'Error while selecting from database. Please try again later.';
      }
      else
      {
         if(mysql_num_rows($result) == 0)
         {
            //there are no categories, so a topic can't be posted
            if($_SESSION['user_level'] == 1)
            {
               echo 'You have not created categories yet.';
            }
            else
            {
               echo 'Before you can post a topic, you must wait for an admin to create some categories.';
            }
         }
         else
         {
      
            echo '<form method="post" action="",enctype="multipart/form-data">
               Name: <input type="text" name="topic_subject"><br />
               Type:';
            
            echo '<select name="topic_cat">';
               while($row = mysql_fetch_assoc($result))
               {
                  echo '<option value="' . $row['cat_id'] . '">' . $row['cat_name'] . '</option>';
               }
            echo '</select><br />';   
               
            echo 'Manufacturer: <input type="text" name="post_manufacturer"><br />
            Release Date: <input type="text" name="post_releasedate"><br />
            Number of Players: <input type="text" name="post_numberofplayers"><br />
            Production: <input type="text" name="post_production"><br /><br /><br />
            Concept by: <input type="text" name="post_conceptby"><br />
            Design by: <input type="text" name="post_designby"><br />
            Art by: <input type="text" name="post_artby"><br />
            Dots/Animation by: <input type="text" name="post_dotsanimationby"><br />
            Mechanics by: <input type="text" name="post_mechanicsby"><br />
            Music by: <input type="text" name="post_musicby"><br />
            Sound by: <input type="text" name="post_soundby"><br />
            Software by: <input type="text" name="post_softwareby"><br />
            
               <input type="submit" value="Create Pinball Machine" />
             </form>';
             
             
         }
      }
   }
   else
   {
      //start the transaction
      $query  = "BEGIN WORK;";
      $result = mysql_query($query);
      
      if(!$result)
      {
         //Damn! the query failed, quit
         echo 'An error occured while creating your topic. Please try again later.';
      }
      else
      {
   
         //the form has been posted, so save it
         //insert the topic into the topics table first, then we'll save the post into the posts table
         $sql = "INSERT INTO 
                  topics_pinballmachines(topic_subject,
                        topic_date,
                        topic_cat,
                        topic_by)
               VALUES('" . mysql_real_escape_string($_POST['topic_subject']) . "',
                        NOW(),
                        " . mysql_real_escape_string($_POST['topic_cat']) . ",
                        " . $_SESSION['user_id'] . "
                        )";
                
         $result = mysql_query($sql);
         if(!$result)
         {
            //something went wrong, display the error
            echo 'An error occured while inserting your data. Please try again later.<br /><br />' . mysql_error();
            $sql = "ROLLBACK;";
            $result = mysql_query($sql);
         }
         else
         {
            //the first query worked, now start the second, posts query
            //retrieve the id of the freshly created topic for usage in the posts query
            $topicid = mysql_insert_id();
            
            $sql = "INSERT INTO
                     posts_pinballmachines(post_manufacturer,
                          post_releasedate,
                          post_numberofplayers,
                          post_production,
                          post_conceptby,
                          post_designby,
                          post_artby,
                          post_dotsanimationby,
                          post_mechanicsby,
                          post_musicby,
                          post_soundby,
                          post_softwareby,
                          post_date,
                          post_topic,
                          post_by)
                  VALUES
                     ('" . mysql_real_escape_string($_POST['post_manufacturer']) . "',
                                                   '" . mysql_real_escape_string($_POST['post_releasedate']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_numberofplayers']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_production']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_conceptby']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_designby']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_artby']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_dotsanimationby']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_mechanicsby']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_musicby']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_soundby']) . "',
                                                  '" . mysql_real_escape_string($_POST['post_softwareby']) . "',
                          NOW(),
                          " . $topicid . ",
                          " . $_SESSION['user_id'] . "                 
                            )";
                     
            $result = mysql_query($sql);
            
            if(!$result)
            {
               //something went wrong, display the error
               echo 'An error occured while inserting your post. Please try again later.<br /><br />' . mysql_error();
               $sql = "ROLLBACK;";
               $result = mysql_query($sql);
            }
            else
            {
               $sql = "COMMIT;";
               $result = mysql_query($sql);
               
               //after a lot of work, the query succeeded!
               echo 'You have succesfully created <a href="topic_pinballmachines.php?id='. $topicid . '">your new pinball machines</a>.';
            }
         }
      }
   }
}

include 'footer.php';
?>

and the following code is where the information is displayed...

<?php
//create_cat.php
include 'connect.php';
include 'header.php';

$sql = "SELECT
         topic_id,
         topic_subject
      FROM
         topics_pinballmachines
      WHERE
         topics_pinballmachines.topic_id = " . mysql_real_escape_string($_GET['id']);
         
$result = mysql_query($sql);

if(!$result)
{
   echo 'The topic could not be displayed, please try again later.';
}
else
{
   if(mysql_num_rows($result) == 0)
   {
      echo 'This topic doesn&prime;t exist.';
   }
   else
   {
      while($row = mysql_fetch_assoc($result))
      {
         //display post data
         echo '<h2>PINBALL MACHINES</h2>';
         echo '<table>
               <tr>
                  <th colspan="2">' . $row['topic_subject'] . '</th>
               </tr>';
      
         //fetch the posts from the database
         $posts_sql = "SELECT
                  posts_pinballmachines.post_topic,
                  posts_pinballmachines.post_manufacturer,
                  posts_pinballmachines.post_releasedate,
                  posts_pinballmachines.post_numberofplayers,
                  posts_pinballmachines.post_production,
                  posts_pinballmachines.post_conceptby,
                  posts_pinballmachines.post_designby,
                  posts_pinballmachines.post_artby,
                  posts_pinballmachines.post_dotsanimationby,
                  posts_pinballmachines.post_mechanicsby,
                  posts_pinballmachines.post_musicby,
                  posts_pinballmachines.post_soundby,
                  posts_pinballmachines.post_softwareby,
                  posts_pinballmachines.post_date,
                  posts_pinballmachines.post_by,
                  users.user_id,
                  users.user_name
               FROM
                  posts_pinballmachines
               LEFT JOIN
                  users
               ON
                  posts_pinballmachines.post_by = users.user_id
               WHERE
                  posts_pinballmachines.post_topic = " . mysql_real_escape_string($_GET['id']);
                  
         $posts_result = mysql_query($posts_sql);
         
         if(!$posts_result)
         {
            echo '<tr><td>The posts could not be displayed, please try again later.</tr></td></table>';
         }
         else
         {
         
            while($posts_row = mysql_fetch_assoc($posts_result))
            {         
echo '
               
                       <tr class="topic-post">
                       <td class="post-content2"><b>Manufacturer: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_manufacturer'])) . '</br></tr>
                     <td class="post-content2"><b>Release Date: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_releasedate'])) . '</br></tr>
                     <td class="post-content2"><b>Number of Players: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_numberofplayers'])) . '</br></tr>
                     <td class="post-content2"><b>Production: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_production'])) . '</br></tr>
                     <td class="post-content2"><b>Concept by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_conceptby'])) . '</br></tr>
                     <td class="post-content2"><b>Design by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_designby'])) . '</br></tr>
                     <td class="post-content2"><b>Art by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_artby'])) . '</br></tr>
                     <td class="post-content2"><b>Dots/Animation by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_dotsanimationby'])) . '</br></tr>
                     <td class="post-content2"><b>Mechanics by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_mechanicsby'])) . '</br></tr>
                     <td class="post-content2"><b>Music by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_musicby'])) . '</br></tr>
                     <td class="post-content2"><b>Sound by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_soundby'])) . '</br></tr>
                     <td class="post-content2"><b>Software by: </b>
                     <td class="post-content">' . htmlentities(stripslashes($posts_row['post_softwareby'])) . '</br></tr>
                     
                     
                     </td>
                    </tr>';
            }
         }
         
         if(!$_SESSION['signed_in'])
         {
            echo '<tr><td colspan=2>You must be <a href="signin.php">signed in</a> to comment. You can also <a href="signup.php">sign up</a> for an account.';
         }
         else
         {
            //show reply box   
            echo '<tr><td colspan="2"><h2>Comment on this Pinball Machine:</h2><br />
               <form method="post" action="reply.php?id=' . $row['topic_id'] . '">
                  <textarea name="reply-content"></textarea><br /><br />
                  <input type="submit" value="Submit reply" />
               </form></td></tr>';
         }
         
         //finish the table
         echo '</table>';
      }
   }
}


include 'footer.php';
?>

Any questions please don't hesitate to ask?

Thanks in advance

Dan

MOD EDIT: code tags added.

Ok I have finally got rid of my syntax errors with this upload script. Now im getting the error uploading your image.

My folders are called project_files and project_thumbs.

This is my script


<?php
$results = "";
 
error_reporting(E_ALL);
    ini_set("display_errors", 1);

//Auto Thumbnail Function
function create_thumbnail($source,$destination, $thumb_width) {
$size = getimagesize($source);
$width = $size[0];
$height = $size[1];
$x = 0;
$y = 0;
if($width> $height) {
$x = ceil(($width - $height) / 2 );
$width = $height;
} elseif($height> $width) {
$y = ceil(($height - $width) / 2);
$height = $width;
}
$new_image = imagecreatetruecolor($thumb_width,$thumb_width)
or die('Cannot initialize new GD image stream');
$extension = get_image_extension($source);
if($extension=='jpg' || $extension=='jpeg')
$image = imagecreatefromjpeg($source);
if($extension=='gif')
$image = imagecreatefromgif($source);
if($extension=='png')
$image = imagecreatefrompng($source);

imagecopyresampled($new_image,$image,0,0,$x,$y,$thumb_width,        
    $thumb_width,$width,$height);
if($extension=='jpg' || $extension=='jpeg')
imagejpeg($new_image,$destination);
if($extension=='gif')
imagegif($new_image,$destination);
if($extension=='png')
imagepng($new_image,$destination);

}

//Get Extension Function
function get_image_extension($name) {
$name = strtolower($name);
$i = strrpos($name,".");
if (!$i) { return ""; }
$l = strlen($name) - $i;
$extension = substr($name,$i+1,$l);
return $extension; 
}

//Random Name Function
function random_name($length) {
$characters = "abcdefghijklmnopqrstuvwxyz01234567890";
$name = "";

for ($i = 0; $i < $length; $i++) {
$name .= $characters[mt_rand(0, strlen($characters) - 1)];
}
return "image-".$name;
}



$images_location = "/project_files/";
$thumbs_location = "/project_thumbs/";
$thumb_width = "100";
$maximum_size = "5000000";

//Check And Save Image
if($_POST) {

if($_FILES['image']['name'] == ""){
$results = "Please select the image you would like to upload by clicking browse";
}
else{
$size=filesize($_FILES['image']['tmp_name']);
$filename = stripslashes($_FILES['image']['name']);
$extension = get_image_extension($filename);
if($size > $maximum_size) {
$results = "Your file size exceeds the maximum file size!";
}
else

if (($extension != "jpg") &&
($extension != "jpeg") &&
($extension != "png") &&
($extension != "gif")) {
$results = "Only the following extensions are allowed. 'jpg', 'jpeg', 'png', 'gif'.";
}
else {
$image_random_name=random_name(15).".".$extension;
$copy = @copy($_FILES['image']['tmp_name'], $images_location.$image_random_name);
if (!$copy) {
$results = "Error while uploadin your image! Please try again!";
}
else{
create_thumbnail($images_location.$image_random_name,$thumbs_location.$image_random_name, $thumb_width);
$results = "Your image has been uploaded!";
}
}
}
}
?>


and the form
Code: [Select]
<html>
<head>
<title>test</title>
</head>
<body>
<?php echo $results; ?>
<form action="#" method="post" enctype="multipart/form-data">
<input type="hidden" name="MAX_FILE_SIZE" value="5000000" />
    <input type="file" name="image" />
    <input type="submit" value="Upload Image" />
</form>
</body>
</html>

i am using the fancy upload script for post attachments on my forum. the problem is that when a user starts a new post and adds an attachment the attachment is uploaded before the post is complete. so how would i associate the attachment with the post that they are going to post when i have no post id to go off? i had tried not uploading the files straight away and instead populate an input box with the filenames but i cant figure it out with this script. Anyone got any other options or ideas?

Hello,

I have written a PHP upload script.. all is well, so far... apart from the moving of the file at the very end of the script.

Here's my script..

<?
/* 

This script handles the uploading of a users photos to the display screen slideshows.

    1. Collects data from uploaded image
    2. Checks to see if database table exists for the screen in question.
    2. Inserts record into database should a table exist. Otherwise, kill script.
    3. Takes ID of inserted record from the database
    4. Renames photo to the ID of the inserted record
    5. Moves photo to the directory holding the images for the screen
    6. Modifies entry inserted above to include new image location
    
*/

//Config
include_once "../../includes/config/config.php";

//Retrieve the screen the user is uploading to
$area = $_POST["area"];

//Check to see if screen exists
$query = "SELECT * FROM screen_areas WHERE area='$area'";
$query = mysql_query($query);
    $num_rows = mysql_num_rows($query);
    if($num_rows=="0") { 
        die("Photo upload could not be completed. Screen not found in database. (Error 3)"); 
    }

//Image Information
$title = $_POST["title"];
$description = $_POST["description"];

//Simplify Image Data Array
$image = $_FILES["image"];
$name = $image["name"]; //Photo Name
$temp = $image["tmp_name"];
$extension = end(explode('.', $name));

//New Photo Location
$new_location_directory = "/screens/images/$area";
$new_location = "$new_location_directory/$name";

//Check if new location (directory) exists
$is_dir = is_dir($new_location_directory);
    if($is_dir=="FALSE") {
        die("Photo upload could not be completed. Screen directory could not be located. (Error 4)"); 
    }

//Insert record into database for this image
$query = "INSERT INTO screen_data (area, title, description, location) VALUES ('$area', '$title', '$description', '$new_location')";
$query = mysql_query($query) or die(mysql_error());
    //Get ID of inserted record
    $query = "SELECT * FROM screen_data WHERE title='$title' AND description='$description' AND location='$new_location'";
    $query = mysql_query($query);
        while($row=mysql_fetch_array($query)) {
            $id = $row["id"];    
        }
        
//Rename File
$name_rename = "$id";
$name_rename .= ".";
$name_rename .= "$extension";

//New Location after Renaming
$new_location = "$new_location_directory/$name_rename";
    
//Move Photo
if(move_uploaded_file("$temp", "$new_location")) {
    echo "The file ".  basename($name).  " has been uploaded";
}

And here is the error returned to me:

Quote

Warning:  move_uploaded_file(/screens/images/conference centre/23.png) [function.move-uploaded-file]: failed to open stream: No such file or directory in /Users/George/Desktop/Torindul/Customer Accounts/1035 The Gryphon School/Display CMS/Website/includes/functions/upload.php on line 69

Warning:  move_uploaded_file() [function.move-uploaded-file]: Unable to move '/Applications/MAMP/tmp/php/phpK8VJYe' to '/screens/images/conference centre/23.png' in /Users/George/Desktop/Torindul/Customer Accounts/1035 The Gryphon School/Display CMS/Website/includes/functions/upload.php on line 69



Any ideas as to why this may be occurring?

Thanks in Advance,
George.

P.S I have CHMOD'd all directories to 755 where required.

Hi,

I have a system that uses PHP to create a Word Doc as information is extracted from a table using this code:

Code: [Select]
header("Content-type: applicaton/save");

header("Content-Disposition: attachment; filename="FILE NAME".doc");
header("Pragma: no-cache");
header("Expires: 0");

This part of the system I'm trying to implement is working fine. However, what I would ideally like for it to do (and at this point I understand that it sounds a bit pointless) is to save that downloaded file onto a specified folder location on the server directory i.e. to the uploads folder.

This will enable all users of the system to then download / view these files as required.

I'm not sure whether this is possible or not but and help would be greatly appreciated. Thanks in advance,


Ben

ok im stuck again and need help. I have gotten rid of the attachment system(too many issues) on ASF and decided to replace it with my own. The problem is that the original new post form is sent to php via jQuery. Obv i cannot do this with files so the attachment section needs to be a seperate form. Now i have no issues with sending files to the folder and sending their name to the database but i need to send multiple. so far when the user selects a file it will add the name of it to a hidden input element and each one that is added to that element is seperated with | . then in the php i would use explode on this element to get an array of the file names. but this only helps when sending to the database and not when moving files. I also dont want a page refresh when uploading files. No other file upload systems out there will work because they upload the file as soon as you press submit, but then how do i add the post id to the attachments row in the database?

How do I use curl to upload an image to this form?
Code: [Select]
<?php
//define a maxim size for the uploaded images in Kb
 define ("MAX_SIZE","100"); 

//This function reads the extension of the file. It is used to determine if the file  is an image by checking the extension.
 function getExtension($str) {
         $i = strrpos($str,".");
         if (!$i) { return ""; }
         $l = strlen($str) - $i;
         $ext = substr($str,$i+1,$l);
         return $ext;
 }

//This variable is used as a flag. The value is initialized with 0 (meaning no error  found)  
//and it will be changed to 1 if an errro occures.  
//If the error occures the file will not be uploaded.
 $errors=0;
//checks if the form has been submitted
 if(isset($_POST['Submit'])) 
 {
  //reads the name of the file the user submitted for uploading
  $image=$_FILES['image']['name'];
  //if it is not empty
  if ($image) 
  {
  //get the original name of the file from the clients machine
  $filename = stripslashes($_FILES['image']['name']);
  //get the extension of the file in a lower case format
   $extension = getExtension($filename);
  $extension = strtolower($extension);
  //if it is not a known extension, we will suppose it is an error and will not  upload the file,  
//otherwise we will do more tests
 if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif")) 
  {
//print error message
  echo '<h1>Unknown extension!</h1>';
  $errors=1;
  }
  else
  {
//get the size of the image in bytes
 //$_FILES['image']['tmp_name'] is the temporary filename of the file
 //in which the uploaded file was stored on the server
 $size=filesize($_FILES['image']['tmp_name']);

//compare the size with the maxim size we defined and print error if bigger
if ($size > MAX_SIZE*1024)
{
echo '<h1>You have exceeded the size limit!</h1>';
$errors=1;
}

//we will give an unique name, for example the time in unix time format
$image_name=time().'.'.$extension;
//the new name will be containing the full path where will be stored (images folder)
$newname="images/".$image_name;
//we verify if the image has been uploaded, and print error instead
$copied = copy($_FILES['image']['tmp_name'], $newname);
if (!$copied) 
{
echo '<h1>Copy unsuccessfull!</h1>';
$errors=1;
}}}}

//If no errors registred, print the success message
 if(isset($_POST['Submit']) && !$errors) 
 {
  echo "<h1>File Uploaded Successfully! Try again!</h1>";
 }

 ?>

 <!--next comes the form, you must set the enctype to "multipart/frm-data" and use an input type "file" -->
 <form name="newad" method="post" enctype="multipart/form-data"  action="">
 <table>
  <tr><td><input type="file" name="image"></td></tr>
  <tr><td><input name="Submit" type="submit" value="upload"></td></tr>
 </table>
 </form>

hello all,

i moved my inhouse website to a hosting company.

now i have a few files that i used to upload data to the website, but every time i try uploading it gives me this error.


Warning: move_uploaded_file(..\pdfs\htdocs\pdfs\citysect/03152011CCRM.pdf) [function.move-uploaded-file]: failed to open stream: No such file or directory in /data/26/2/13/16/2502179/user/2740540/htdocs/loginscripts/uploadpdf.php on line 34

Warning: move_uploaded_file() [function.move-uploaded-file]: Unable to move '/data/20/tmp_new/php2GMXs3' to '..\pdfs\htdocs\pdfs\citysect/03152011CCRM.pdf' in /data/26/2/13/16/2502179/user/2740540/htdocs/loginscripts/uploadpdf.php on line 34
could not moved


can anyone help me?

Hi guys I have got this code here, giving quite a few errors and was wondering if anyone could help me sort it out, the script (should) run straight away just have to edit the database connect, I've tried manually creating the table and taking out the create table but when I try and upload an image I get these errors:

Warning: move_uploaded_file(latest.img) [function.move-uploaded-file]: failed to open stream: Permission denied in /Applications/XAMPP/xamppfiles/htdocs/php/image.php on line 23

Warning: move_uploaded_file() [function.move-uploaded-file]: Unable to move '/Applications/XAMPP/xamppfiles/temp/php2lgspw' to 'latest.img' in /Applications/XAMPP/xamppfiles/htdocs/php/image.php on line 23

Warning: fopen(latest.img) [function.fopen]: failed to open stream: No such file or directory in /Applications/XAMPP/xamppfiles/htdocs/php/image.php on line 24

Warning: filesize() [function.filesize]: stat failed for latest.img in /Applications/XAMPP/xamppfiles/htdocs/php/image.php on line 25

Warning: fread() expects parameter 1 to be resource, boolean given in /Applications/XAMPP/xamppfiles/htdocs/php/image.php on line 25

here is the code:

Code: [Select]
<?php

// Connect to database

$errmsg = "";
if (! @mysql_connect("localhost","root","")) {
        $errmsg = "Cannot connect to database";
        }
@mysql_select_db("test");

// First run ONLY - need to create table by uncommenting this
// Or with silent @ we can let it fail every subsequent time ;-)

$q = < < <CREATE
create table pix (
    pid int primary key not null auto_increment,
    title text,
    imgdata longblob)
CREATE;
@mysql_query($q);

// Insert any new image into database

if ($_REQUEST[completed] == 1) {
        // Need to add - check for large upload. Otherwise the code
        // will just duplicate old file ;-)
        // ALSO - note that latest.img must be public write and in a
        // live appliaction should be in another (safe!) directory.
        move_uploaded_file($_FILES['imagefile']['tmp_name'],"latest.img");
        $instr = fopen("latest.img","rb");
        $image = addslashes(fread($instr,filesize("latest.img")));
        if (strlen($image) < 149000) {
                mysql_query ("insert into pix (title, imgdata) values (\"".
                $_REQUEST[whatsit].
                "\", \"".
                $image.
                "\")");
        } else {
                $errmsg = "Too large!";
        }
}

// Find out about latest image

$gotten = @mysql_query("select * from pix order by pid desc limit 1");
if ($row = @mysql_fetch_assoc($gotten)) {
        $title = htmlspecialchars($row[title]);
        $bytes = $row[imgdata];
} else {
        $errmsg = "There is no image in the database yet";
        $title = "no database image available";
        // Put up a picture of our training centre
        $instr = fopen("../wellimg/ctco.jpg","rb");
        $bytes = fread($instr,filesize("../wellimg/ctco.jpg"));
}

// If this is the image request, send out the image

if ($_REQUEST[gim] == 1) {
        header("Content-type: image/jpeg");
        print $bytes;
        exit ();
        }
?>

<html><head>
<title>Upload an image to a database</title>
<body bgcolor=white><h2>Here's the latest picture</h2>
<font color=red><?= $errmsg ?></font>
<center><img src=?gim=1 width=144><br>
<b><?= $title ?></center>
<hr>
<h2>Please upload a new picture and title</h2>
<form enctype=multipart/form-data method=post>
<input type=hidden name=MAX_FILE_SIZE value=150000>
<input type=hidden name=completed value=1>
Please choose an image to upload: <input type=file name=imagefile><br>
Please enter the title of that pictu <input name=whatsit><br>
then: <input type=submit></form><br>
<hr>
By Graham Ellis - graham@wellho.net
</body>
</html>

I am using xammp with FileZilla running on it. I've changed my php.ini  settings
to "C:/xxx/tmp" directory but am unable to upload a file. Th cod is  running but
it dos not seem to upload the temporary fil. Plase somebody help  me. ALso my form in upload.html  has <form action="upload_file.php" method="post" enctype="multipart/form-data">

I let my members to upload their photos,
I m using the script I coded which checks the file extension, if the file extension is "jpg"
( if ($this->url['type'] == "image/jpg")) and less than 600kb it uploads. Otherwise it gives you a warning..
What I wonder is, do I face any unwanted results about this later ? Like someone uploads a virus or script then execute it and do something ?

Hi,
I have this upload script that uploads a file and writes path to DB:

Code: [Select]
<?php

$uploadDir = '../uploads/';

if(isset($_POST['upload']))
{
foreach ($_FILES as $file)
{
$fileName = $file['name'];
$tmpName = $file['tmp_name'];
$fileSize = $file['size'];
$fileType = $file['type'];

if($fileName==""){

$filePath = '../img/none.jpg';
}
else{

$filePath = $uploadDir . $fileName;
}

if(!get_magic_quotes_gpc())
{
$fileName = addslashes($fileName);
$filePath = addslashes($filePath);
}
$fileinsert[]=$filePath;
}
?>

this works fine for a single image, but I eed to upload 2 images with a single submission....any ideas how to do this?
Thanks

hi,

i'm trying to create simple form that will also upload only xml data.

first, the user will need to upload an xml document only by clicking submit, the data will be posted to the server and the user will be redirected to uploader.php. This PHP file is going
to process the form data and do all the work.


#upload.php

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
   "http://www.w3.org/TR/html4/strict.dtd">
<html>

<body>

<form enctype="multipart/form-data" action="uploader.php" method="POST">

<input type="hidden" name="MAX_FILE_SIZE" value="500" />
Please select the correct file that you require to create an XML export.
<br/>
<label for="uploadfile">Filename:</label>
<input name="uploadfile" type="file" size="100"/>
<input type="submit" value="Upload File" />

</form>



</body>

</html> 


second, i'd like to process the data and post the information to another php document that will parse the xml document.

this particular file is not getting past the first if statement. i'm not really seeing why???


#uploader.php

<?php
//File upload restrictions parameters
//Will only restrict to allowing xml documents to be uploaded


if ((($_FILES["file"]["type"] == "application
/xml")
    {
    if ($_FILES["file"]["error"] > 0)
        {
        echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
        }
    else
        {
        echo "Upload: " . $_FILES["file"]["name"] . "<br />";
        echo "Type: " . $_FILES["file"]["type"] . "<br />";
        echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
        echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />";


//Save the uploaded files to a directory
//If the file already exists with the same date stamp, do not upload
        if (file_exists("../upload/" . $_FILES["file"]["name"]))
            {
            echo $_FILES["file"]["name"] . " already exists. ";
            }
//If the file does not exist, create a new entry
        else
            {
            move_uploaded_file($_FILES["file"]["tmp_name"],
            "../upload/" . $_FILES["file"]["name"]);
            echo "Stored in: " . "../upload/" . $_FILES["file"]["name"];
            }
        }
    }
//Create an error messag
else
    {
    echo "This is an invalid file. Please make sure an XML document has been selected to upload. Thanks.";
    }


// make an error handler which will be used if the upload fails
function error($error, $location, $seconds = 20)
{
        header("Refresh: $seconds; URL=\"$location\"");
        echo '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"'."\n".
        '"http://www.w3.org/TR/html4/strict.dtd">'."\n\n".
        '<html lang="en">'."\n".
        '       <head>'."\n".
        '               <meta http-equiv="content-type" content="text/html; charset=iso-8859-1">'."\n\n".
        '               <link rel="stylesheet" type="text/css" href="stylesheet.css">'."\n\n".
        '       <title>Upload error</title>'."\n\n".
        '       </head>'."\n\n".
        '       <body>'."\n\n".
        '       <div id="Upload">'."\n\n".
        '               <h1>Upload failure</h1>'."\n\n".
        '               <p>An error has occured: '."\n\n".
        '               <span class="red">' . $error . '...</span>'."\n\n".
        '               The upload form is reloading</p>'."\n\n".
        '        </div>'."\n\n".
        '</html>';
        exit;
} // end error handler

?>


third, once the simple file parses the information.. i'd like to display a dropdown menu that will allow a person to select what entry they'd like to be displayed, namely page to be redirected to.


#dropdown.php

<?php
$drop = $_REQUEST['dropdown'];
?>



<html>
<body>

<form action="results.php" method="POST" name="links">
<select name="dropdown" value="options">
<option value"form.php">Select a Format</option>
<option value="1.php">1</option>
<option value="2.php">2</option>
<option value="3.php">3</option>
<option value="4.php">4</option>
<option value="5.php">5</option>
</select>

<br/>
<br/>
<input type="submit" value="Submit Query"/>

</body>
</html>


fourth part I, based on the above information... the user should have a page with a include("livesearch.php") for 1.php, but i will place livesearch.php code below...

#livesearch.php

$target_path = $target_path . basename($_FILES['uploadedfile']['tmp_name']);


$xmlDoc=new DOMDocument();
$xmlDoc->load("uploader.ph");

$x=$xmlDoc->getElementsByTagName('link');

//get the q parameter from URL
$q=$_GET["q"];

//lookup all links from the xml file if length of q>0
if (strlen($q)>0)
    {
    $hint="";
        for($i=0; $i<($x->length); $i++)
             {
            $y=$x->item($i)->getElementsByTagName('PPC');
            $z=$x->item($i)->getElementsByTagName('url');
                if ($y->item(0)->nodeType==1)
                    {
                    //find a link matching the search text
                    if (stristr($y->item(0)->childNodes->item(0)->nodeValue,$q))
                        {
                        if ($hint=="")
                            {
                            $hint="<a href='" .
                            $z->item(0)->childNodes->item(0)->nodeValue .
                            "' target='_blank'>" .
                            $y->item(0)->childNodes->item(0)->nodeValue . "</a>";
                            }
                    else
                            {
                            $hint=$hint . "<br /><a href='" .
                            $z->item(0)->childNodes->item(0)->nodeValue .
                            "' target='_blank'>" .
                            $y->item(0)->childNodes->item(0)->nodeValue . "</a>";
                            }
                        }
                        }
            }
    }

// Set output to "no suggestion" if no hint were found
// or to the correct values
if ($hint=="")
    {
    $response="no suggestion";
    }
else
    {
    $response=$hint;
    }

//output the response
echo $response;
?> 

fourth part II, the above code will be part of 1.php... this part of the form will ideally return a livesearch query from the uploaded xml document for the checked boxes by an element's name.

#form.php

<html>

<head>

<script type="text/javascript">
function showResult(str)
{
if (str.length==0)
  {
  document.getElementById("livesearch").innerHTML="";
  document.getElementById("livesearch").style.border="0px";
  return;
  }
if (window.XMLHttpRequest)
  {// code for IE7+, Firefox, Chrome, Opera, Safari
  xmlhttp=new XMLHttpRequest();
  }
else
  {// code for IE6, IE5
  xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");
  }
xmlhttp.onreadystatechange=function()
  {
  if (xmlhttp.readyState==4 && xmlhttp.status==200)
    {
    document.getElementById("livesearch").innerHTML=xmlhttp.responseText;
    document.getElementById("livesearch").style.border="1px solid #A5ACB2";
    }
  }
xmlhttp.open("GET","livesearch.php?q="+str,true);
xmlhttp.send();
}
</script>

</head>


<body>

<?php

echo "<form>
Please place element1 # to search:
<input type='text' size='30' onkeyup='showResult(this.value)' />
<div id='livesearch'></div>
</form>";


// This is to collect box array value as global_variables is set off in PHP5 by default
//
// variable that will send $box information from the checkboxes named getXMLbox to
// an variable array
$box=$_POST['getXMLbox'];
        if(empty($box))
                {
                echo("These are the boxes that WERE not selected: $box");
                }
        else
                {
                $N = count($box);
                echo("These are the boxes that ARE selected: $N ");
                        for($i=0; $i<$N; $i++)
                                {
                                echo($box[$i] . " ");
                                }
                }

while (list ($key,$val) = @each ($box))
        {
        echo "$val,";
        }

echo "<form method=post action='simple.php'>";
echo "<table border='0' cellspacing='0' style='border-collapse: collapse' width='100' >

<tr bgcolor='#ffffff'>
<td width='25%'><input type=checkbox name=getXMLbox[] value='element1'></td>
<td width='25%'>&nbsp;element1</td>
</tr>

<tr bgcolor='#ffffff'>
<td width='25%'><input type=checkbox name=getXMLbox[] value='element2'></td>
<td width='25%'>&nbsp;element2</td>
</tr>

<tr>
<td><br/></td>
</tr>

<tr>
<td colspan =6 align=center><input type=submit name=SubmitForm value='Submit Query'></form></td>
</tr>
</table>";

?>


finally, i'd like to parse the data with a php5 function and display the xml information onto the screeen or have a dialog box open up for a person to save as.


#simple.php

<?php
/*
we will use simpleXML to transfer xml data
to parse and read xml data
*/

//load the xml file to $file
$file = ($_FILES["file"]["name"]);

#load xml data
$xml = simplexml_load_file($file) or die ("The connection to could not load the XML document. Please try again. \n");

#display the entire document
echo ('$xml');
?>

so basically, i'm a bit lost and not getting the right outcome that i'd like. can someone please assist?

many thanks.

Hi all,

I have the following script which uploads 1 image per testimonial, and stores the url in the database, in a field named 'Images'.
I have added more upload fields to my form and named them images 2,images 3 etc, and then i tried to copy the following code to upload the urls in to the extra fields i mage for the urls in the database, ('Images2','Images3' etc etc), but i am getting a blank page now. I even copied teh function and adjusted the names...eg $imgname2, 3 etc.
 Can anybody help me please?
Here is the code that deals with the image upload

Thanks

Code: [Select]
<p align="center">&nbsp;</p>
</body>
<?php
$con = mysql_connect("localhost","xxxxxxxxxxxxxxxxx","xxxxxxxxxxxxx");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("xxxxxxxxxxxx", $con);

$image_tmpname = $_FILES['images']['name'];
$imgdir = "uploaded_images/";
$imgname = $imgdir.$image_tmpname;

if(move_uploaded_file($_FILES['images']['tmp_name'], $imgname))
{
list($width,$height,$type,$attr)= getimagesize($imgname);
switch($type)
{
 case 1:
  $ext = ".gif"; break;
 case 2:
  $ext = ".jpg"; break;
 case 3:
  $ext = ".png"; break;
 default:
   echo "Not acceptable format of image";
}

$sql="INSERT INTO testimonials (CustomerName, Town, Testimonial, SortOrder, Images)
VALUES
('$_POST[customername]','$_POST[town]','$_POST[testimonial]','$_POST[sort_order]','$imgname')";

}
if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "<p align=center><b>1 testimonial added</b></p>";

mysql_close($con);
?>
</html>