PHP - Photo Upload - Very Basic

HI All,

I have a form submission that uploads a photo as well as submitting other data.

I would like to change the name of the photo to the id of the person record (created automatically on by the database) then a hyphen, then their first name and lastname. (i am flexible on this).

This file name will also need to be submitted into the person record so the photo and the person can be linked.

I am struggling with this one - but here is the code i have so far.

<?php 
include 'includes/dbconn.php';

$target_dir = "img/people/";
$target_file = $target_dir . basename($_FILES["personHeadshot"]["name"]);
$uploadOk = 1;
$imageFileType = strtolower(pathinfo($target_file,PATHINFO_EXTENSION));

if ($_SERVER['REQUEST_METHOD']=='POST'){

	$fn = $_POST['fname'];
	$ln = $_POST['lname'];
	$ad1 = $_POST['ad1'];
	$ad2 = $_POST['ad2'];
	$city = $_POST['city'];
	$post = $_POST['postcode'];
	$tel = $_POST['phone'];
	$email = $_POST['email'];
	$crole = $_POST['comRole'];
	$OFA = $_POST['OFA'];
	$playerType = $_POST['playerType'];
	$team = $_POST['primaryTeam'];


	$stmt = $conn->prepare("
	                       INSERT IGNORE INTO person (fname, lname, committee_role_id, player_type_id, team_id, ad1, ad2, city, postcode, mobile, email, on_field_auth_id) 
	                       VALUES (?,?,?,?,?,?,?,?,?,?,?,?)
	                       ");
	$stmt -> bind_param(ssiiissssssi, $fn, $ln, $crole, $playerType, $team, $ad1, $ad2, $city, $post, $tel, $email, $OFA);
	$stmt -> execute();

	// Check if image file is a actual image or fake image
//photo upload
	$check = getimagesize($_FILES["personHeadshot"]["tmp_name"]);
  if($check !== false) {
    echo "File is an image - " . $check["mime"] . ".";
    $uploadOk = 1;
  } else {
    echo "File is not an image.";
    $uploadOk = 0;
  }
//photo upload

	header("location: ../admin-people-list.php");
}
// Check if file already exists
if (file_exists($target_file)) {
  echo "Sorry, file already exists.";
  $uploadOk = 0;
}

// Check file size
if ($_FILES["personHeadshot"]["size"] > 500000) {
  echo "Sorry, your file is too large.";
  $uploadOk = 0;
}

// Allow certain file formats
if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg"
&& $imageFileType != "gif" ) {
  echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";
  $uploadOk = 0;
}

// Check if $uploadOk is set to 0 by an error
if ($uploadOk == 0) {
  echo "Sorry, your file was not uploaded.";
// if everything is ok, try to upload file
} else {
  if (move_uploaded_file($_FILES["personHeadshot"]["tmp_name"], $target_file)) {
    echo "The file ". basename( $_FILES["personHeadshot"]["name"]). " has been uploaded.";
  } else {
    echo "Sorry, there was an error uploading your file.";
  }
}

files that upload during insert/submit form was gone , only files upload during the update remain , is the way query for update multiple files is wrong ?

$targetDir1= "folder/pda-semakan/ic/";
if(isset($_FILES['ic'])){
     $fileName1 = $_FILES['ic']['name'];
 $targetFilePath1 = $targetDir1 . $fileName1;
 //$main_tmp2 = $_FILES['ic']['tmp_name'];
$move2 =move_uploaded_file($_FILES["ic"]["tmp_name"], $targetFilePath1);
}

$targetDir2= "folder/pda-semakan/sijil_lahir/";
if(isset($_FILES['sijilkelahiran'])){
     $fileName2 = $_FILES['sijilkelahiran']['name'];
 $targetFilePath2 = $targetDir2 . $fileName2;
$move3 =move_uploaded_file($_FILES["sijilkelahiran"]["tmp_name"], $targetFilePath2);
}

$targetDir3= "folder/pda-semakan/sijil_spm/";
if(isset($_FILES['sijilspm'])){
     $fileName3 = $_FILES['sijilspm']['name'];
 $targetFilePath3 = $targetDir3 . $fileName3;
$move4 =move_uploaded_file($_FILES["sijilspm"]["tmp_name"], $targetFilePath3);
}



$query1=("UPDATE semakan_dokumen set student_id='$noMatrik', email= '$stdEmail', surat_tawaran='$fileName', ic='$fileName1',sijil_lahir='$fileName2',sijil_spm= '$fileName3' where email= '$stdEmail'");

i am in the process of creating an auction site.

However the images do not show , just the placeholder. Can anyone indicate where I have gone wrong ?

i am using this script to enter the items into the Database

html>
<head><title></title>    

<link rel="stylesheet" type="text/css" href="style.css">
         
</head>

<body>
<?php 
echo "<img src='auction_logo.png' id='logo'/>";
echo "<br>";
echo "<form class='add_item_form' action='check_item.php' method='POST'  enctype='multipart/form-data'>";

if(isset($_GET["item"]))
{

if($_GET["item"]=="duplicate")
{
    echo "<h4>Already entered this item</h4>";
    echo "<br>";
    echo "<h4>Please try again</h4>";
 
}

else if($_GET["item"]=="successful")
{
echo "<h4>Successfully added an item!</h4>";
} 

}
 
else
{
echo "<h4>Please add an item</h4>";
}

echo "<label for='item_name' class='label'>Item Name:</label>";
echo "<input class='text'  type='text' name='item_name'/>";
echo "<br>";
echo "<label for='item_description'  class='label'>Item Description:</label>";
echo "<input class='text'  type='text' name='item_description'>";
echo "<br>";
echo "<label for='endtime'  class='label'> Ending Bid Time: </label>";
echo "<input  class='text'  type='text' name='endtime'>";
echo "<br>";
echo "<label for='item_pic'  class='label'>Item Pictu </label>";
echo "<input class='text'  type='file' value='item_pic' name='item_pic'>";
echo "<br>";
echo "<input class='submit' type='submit' value='Add Item'/>";

echo "</form>";
?>

</body>
</html>

This script displays the items : 

<html>
<head><title></title> 
 

 <link rel="stylesheet" type="text/css" href="style.css">
 
</head>

<body>
<?php 

session_start();

if(!isset($_SESSION["username"]))
{
    header("Location:login.php");
}

else
{

$DBHOST = "localhost";
$DBUSER = "root";
$DBPWD = "";
$DBNAME = "customs_auction";

$conn = new mysqli($DBHOST, $DBUSER, $DBPWD, $DBNAME);    
 if($conn->connect_error)
 {
 die("Connection failed!".$conn->connect_error);
 }
 
echo "<img src='auction_logo.png' id='logo'/>";
echo "<a href='logout.php' class='logout button'>Logout </a>";
 
    
$statement = "SELECT * FROM item";
$result = $conn->query($statement);

while($row = $result->fetch_assoc())
{

$iid = $row["item_id"];
$iname= $row["item_name"];
$ipic = $row["item_pic"];
$icurrentp = $row["current_bid"];
$iimg = "item/";
$iimg = $iimg.$row["item_pic"];
 
 
$link = "item_details.php?item_id=";
$item_details = $link.$iid;
echo "<div class='item'>";    
echo "<div class='item_row'>Item Id: $iid</div>";
echo "<div class='item_row'>Item Name: $iname</div>";
echo "<img class='item_img' src='$iimg' alt='image'>";
echo "<div class='item_row'>Current Bid: $$icurrentp</div>";
echo "<div class='item_row' ><a class='link' href='$item_details'>Item Details</a></div>";
echo "</div>";
 
}/*display all the items on screen*/

$conn->close();
}/*prevent direct access by user*/
 
 
?>    
    
    
</body>
</html>

Hi,

I am making login page with database and php. I need to be able when the person clicks theogin button to take photo of the person and add it to that same database based on the info entered.

I am doing this to know if that person that logged in is the person in reality.

Is it possible 

adding photo,Array ( [name] => profilepic.jpeg [type] => image/jpeg [tmp_name] => C:\xampp\tmp\phpB923.tmp [error] => 0 [size] => 152127 )

Hi,

We have been using this code for ages, but suddenly for some reason we cannot upload an image using the code below.

When we try to Print_r the $profilephoto variable, I get this error.

The filename is correct, but what is that [error]??  And how do I resolve it?

Oddly it does upload it locally, but LIVE, it won't 

This is the code.

if (isset($updatephoto))
{
echo "adding photo,";
print_r($profilephoto);
 define ("MAX_SIZE","5000");
 function getExtension($str) {
         $i = strrpos($str,".");
         if (!$i) { return ""; }
         $l = strlen($str) - $i;
         $ext = substr($str,$i+1,$l);
         return $ext;
 }

 $errors=0;

 if($_SERVER["REQUEST_METHOD"] == "POST")
 {
    $image =$_FILES["profilephoto"]["name"];
    $uploadedfile = $_FILES['profilephoto']['tmp_name'];

    if ($image) 
    {

        $filename = stripslashes($_FILES['profilephoto']['name']);
        $extension = getExtension($filename);
        $extension = strtolower($extension);


 if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif")) 
        {
            echo "Unknown Extension..!";
        }
        else
        {

 $size=filesize($_FILES['profilephoto']['tmp_name']);


if ($size > MAX_SIZE*1024)
{
    echo "File Size Excedeed..!!";
}


if($extension=="jpg" || $extension=="jpeg" )
{
$uploadedfile = $_FILES['profilephoto']['tmp_name'];
$src = imagecreatefromjpeg($uploadedfile);

}
else if($extension=="png")
{
$uploadedfile = $_FILES['profilephoto']['tmp_name'];
$src = imagecreatefrompng($uploadedfile);

}
else 
{
$src = imagecreatefromgif($uploadedfile);
echo $scr;
}

list($width,$height)=getimagesize($uploadedfile);
$newwidth=600;
$newheight=($height/$width)*$newwidth;
$tmp=imagecreatetruecolor($newwidth,$newheight);

imagecopyresampled($tmp,$src,0,0,0,0,$newwidth,$newheight,$width,$height);
$pic=($_FILES['profilephoto']['name']);
$random = (rand()%99999999);
$newname="$random"."$pic";
$filename = "images/profiles/". $newname;
imagejpeg($tmp,$filename,100);
imagedestroy($src);
imagedestroy($tmp);
}}
}
$query = ("UPDATE users SET profilephoto =:newname WHERE id =:userid");
$result = $pdo->prepare($query);
$result->execute(array(':userid' => $userid, ':newname' => $newname));
echo "<script>
          window.location.replace('/profile/')
          </script>";}