PHP - Upload Tree From File Jstree

I havent included the whole title as it wouldnt let me but I was wondering if someone could help me on this?

I know this is possible as torrentflux caters for this but unsure of where to start.

I dont want to allow file or directory uploads or creation in my /etc/php.ini file (this is turned off).

Yet then torrentflux allows me to link a torrent from an external source (using legal downloads of course  ) but then it uploads it on my server and creates folders on a per user basis.

How is this possible can someone give me some pointers please?

I look forward to any replies,
Jeremy.

So, I'm learning how to upload pictures into a system from my awesome PHP book. I've looked and looked through the script but I can't figure out whats wrong with it.

Goal:
The script is meant to save a full version of the image in the images folder and a thumbnail in the thumbnail folder.
Bug:
The full image does not appear in any folder, and the thumbnail is created but its put in the images folder.

I've checked the GD library, and everything is supported.

image_effect.php

<?php
//change this path to match your images directory
$dir ='C:/x/xampp/htdocs/images';

//change this path to match your fonts directory and the desired font
putenv('GDFONTPATH=' . 'C:/Windows/Fonts');
$font = 'arial';

// make sure the requested image is valid
if (isset($_GET['id']) && ctype_digit($_GET['id']) && file_exists($dir . '/' .
    $_GET['id'] . '.jpg')) {
    $image = imagecreatefromjpeg($dir . '/' . $_GET['id'] . '.jpg');
} else {
    die('invalid image specified');
}

// apply the filter
$effect = (isset($_GET['e'])) ? $_GET['e'] : -1;
switch ($effect) {
case IMG_FILTER_NEGATE:
    imagefilter($image, IMG_FILTER_NEGATE); 
    break;
case IMG_FILTER_GRAYSCALE:
    imagefilter($image, IMG_FILTER_GRAYSCALE); 
    break;
case IMG_FILTER_EMBOSS:
    imagefilter($image, IMG_FILTER_EMBOSS); 
    break;
case IMG_FILTER_GAUSSIAN_BLUR:
    imagefilter($image, IMG_FILTER_GAUSSIAN_BLUR);
    break;
}

// add the caption if requested
if (isset($_GET['capt'])) {
    imagettftext($image, 12, 0, 20, 20, 0, $font, $_GET['capt']);
}

//add the logo watermark if requested
if (isset($_GET['logo'])) {
    // determine x and y position to center watermark
    list($width, $height) = getimagesize($dir . '/' . $_GET['id'] . '.jpg');
    list($wmk_width, $wmk_height) = getimagesize('images/logo.png');
    $x = ($width - $wmk_width) / 2;
    $y = ($height - $wmk_height) / 2;
    
    $wmk = imagecreatefrompng('images/logo.png');
    imagecopymerge($image, $wmk, $x, $y, 0, 0, $wmk_width, $wmk_height, 20);
    imagedestroy($wmk);
}

// show the image
header('Content-Type: image/jpeg');
imagejpeg($image, '', 100);
?>


check_image.php

<?php
include 'db.inc.php';
//connect to MySQL
$db = mysql_connect(MYSQL_HOST, MYSQL_USER, MYSQL_PASSWORD) or 
    die ('Unable to connect. Check your connection parameters.');
mysql_select_db(MYSQL_DB, $db) or die(mysql_error($db));

//change this path to match your images directory
$dir ='C:/x/xampp/htdocs/images';

//change this path to match your thumbnail directory
$thumbdir = $dir . '/thumbs';

//change this path to match your fonts directory and the desired font
putenv('GDFONTPATH=' . 'C:/Windows/Fonts');
$font = 'arial';

// handle the uploaded image
if ($_POST['submit'] == 'Upload') {

    //make sure the uploaded file transfer was successful
    if ($_FILES['uploadfile']['error'] != UPLOAD_ERR_OK)
    {
        switch ($_FILES['uploadfile']['error']) {
        case UPLOAD_ERR_INI_SIZE:
            die('The uploaded file exceeds the upload_max_filesize directive ' .
                'in php.ini.');
            break;
        case UPLOAD_ERR_FORM_SIZE:
            die('The uploaded file exceeds the MAX_FILE_SIZE directive that ' .
                'was specified in the HTML form.');
            break;
        case UPLOAD_ERR_PARTIAL:
            die('The uploaded file was only partially uploaded.');
            break;
        case UPLOAD_ERR_NO_FILE:
            die('No file was uploaded.');
            break;
        case UPLOAD_ERR_NO_TMP_DIR:
            die('The server is missing a temporary folder.');
            break;
        case UPLOAD_ERR_CANT_WRITE:
            die('The server failed to write the uploaded file to disk.');
            break;
        case UPLOAD_ERR_EXTENSION:
            die('File upload stopped by extension.');
            break;
        }
    }
    
    //get info about the image being uploaded
    $image_caption = $_POST['caption'];
    $image_username = $_POST['username'];
    $image_date = @date('Y-m-d');
    list($width, $height, $type, $attr) =
        getimagesize($_FILES['uploadfile']['tmp_name']);

    // make sure the uploaded file is really a supported image
    $error = 'The file you uploaded was not a supported filetype.';
    switch ($type) {
    case IMAGETYPE_GIF:
        $image = imagecreatefromgif($_FILES['uploadfile']['tmp_name']) or
            die($error);
        break;
    case IMAGETYPE_JPEG:
        $image = imagecreatefromjpeg($_FILES['uploadfile']['tmp_name']) or
            die($error);
        break;
    case IMAGETYPE_PNG:
        $image = imagecreatefrompng($_FILES['uploadfile']['tmp_name']) or
            die($error);
        break;
    default:
        die($error);
    }

    //insert information into image table
    $query = 'INSERT INTO images
        (image_caption, image_username, image_date)
    VALUES
        ("' . $image_caption . '", "' . $image_username . '", "' . $image_date .
        '")';
    
    $result = mysql_query($query, $db) or die (mysql_error($db));
    
    //retrieve the image_id that MySQL generated automatically when we inserted
    //the new record
    $last_id = mysql_insert_id();
    
    // save the image to its final destination
    $image_id = $last_id;
    imagejpeg($image, $dir . '/' . $image_id  . '.jpg');
    imagedestroy($image);

} else {
    // retrieve image information
    $query = 'SELECT
        image_id, image_caption, image_username, image_date
    FROM
        images
    WHERE
        image_id = ' . $_POST['id'];
    $result = mysql_query($query, $db) or die (mysql_error($db));
    extract(mysql_fetch_assoc($result));

    list($width, $height, $type, $attr) = getimagesize($dir . '/' . $image_id .
        '.jpg');
}

if ($_POST['submit'] == 'Save') {
    // make sure the requested image is valid
    if (isset($_POST['id']) && ctype_digit($_POST['id']) &&
        file_exists($dir . '/' . $_POST['id'] . '.jpg')) {
        $image = imagecreatefromjpeg($dir . '/' . $_POST['id'] . '.jpg');
    } else {
        die('invalid image specified');
    }

    // apply the filter    
    $effect = (isset($_POST['effect'])) ? $_POST['effect'] : -1;
    switch ($effect) {
    case IMG_FILTER_NEGATE:
        imagefilter($image, IMG_FILTER_NEGATE); 
        break;
    case IMG_FILTER_GRAYSCALE:
        imagefilter($image, IMG_FILTER_GRAYSCALE); 
        break;
    case IMG_FILTER_EMBOSS:
        imagefilter($image, IMG_FILTER_EMBOSS); 
        break;
    case IMG_FILTER_GAUSSIAN_BLUR:
        imagefilter($image, IMG_FILTER_GAUSSIAN_BLUR);
        break;
    }

    // add the caption if requested
    if (isset($_POST['emb_caption'])) {
        imagettftext($image, 12, 0, 20, 20, 0, $font, $image_caption);
    }

    //add the logo watermark if requested
    if (isset($_POST['emb_logo'])) {
        // determine x and y position to center watermark
        list($wmk_width, $wmk_height) = getimagesize('images/logo.png');
        $x = ($width - $wmk_width) / 2;
        $y = ($height - $wmk_height) / 2;
    
        $wmk = imagecreatefrompng('images/logo.png');
        imagecopymerge($image, $wmk, $x, $y, 0, 0, $wmk_width, $wmk_height, 20);
        imagedestroy($wmk);
    }

    // save the image with the filter applied
    imagejpeg($image, $dir . '/' . $_POST['id'] . '.jpg', 100);

    //set the dimensions for the thumbnail
    $thumb_width = $width * 0.10;
    $thumb_height = $height * 0.10;

    //create the thumbnail
    $thumb = imagecreatetruecolor($thumb_width, $thumb_height);
    imagecopyresampled($thumb, $image, 0, 0, 0, 0, $thumb_width, $thumb_height,
        $width, $height);
    imagejpeg($thumb, $dir . '/' . $_POST['id'] . '.jpg', 100);
    imagedestroy($thumb);
?>
<html>
 <head>
  <title>Here is your pic!</title>
 </head>
 <body>
  <h1>Your image has been saved!</h1>
  <img src="images/<?php echo $_POST['id']; ?>.jpg" />
 </body>
</html>
<?php
} else {
?>
<html>
 <head>
  <title>Here is your pic!</title>
 </head>
 <body>
  <h1>So how does it feel to be famous?</h1>
  <p>Here is the picture you just uploaded to our servers:</p>
<?php 
   if ($_POST['submit'] == 'Upload') {
       $imagename = 'images/' . $image_id  . '.jpg';
   } else {
       $imagename = 'image_effect.php?id=' . $image_id  . '&e=' .
           $_POST['effect'];

       if (isset($_POST['emb_caption'])) {
           $imagename .= '&capt=' . urlencode($image_caption); 
       }

       if (isset($_POST['emb_logo'])) {
           $imagename .= '&logo=1'; 
       }
   }
?>
   <img src="<?php echo $imagename; ?>" style="float:left;">
  <table>
   <tr><td>Image Saved as: </td><td><?php echo $image_id  . '.jpg'; ?></td></tr>
   <tr><td>Height: </td><td><?php echo $height; ?></td></tr>
   <tr><td>Width: </td><td><?php echo $width; ?></td></tr>
   <tr><td>Upload Date: </td><td><?php echo $image_date; ?></td></tr>
  </table>
  <p>You may apply special options to your image below. Note: saving an image
with any of the options applied  <em>cannot be undone</em>.</p>
  <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
   <div>
    <input type="hidden" name="id" value="<?php echo $image_id;?>"/>
    Filter: <select name="effect">
     <option value="-1">None</option>
<?php
    echo '<option value="' . IMG_FILTER_GRAYSCALE . '"';
    if (isset($_POST['effect']) && $_POST['effect'] == IMG_FILTER_GRAYSCALE) {
        echo ' selected="selected"';
    }
    echo '>Black and White</option>';

    echo '<option value="' . IMG_FILTER_GAUSSIAN_BLUR . '"';
    if (isset($_POST['effect']) && $_POST['effect'] ==
        IMG_FILTER_GAUSSIAN_BLUR) {
        echo ' selected="selected"';
    }
    echo '>Blur</option>';

    echo '<option value="' . IMG_FILTER_EMBOSS . '"';
    if (isset($_POST['effect']) && $_POST['effect'] == IMG_FILTER_EMBOSS) {
        echo ' selected="selected"';
    }
    echo '>Emboss</option>';

    echo '<option value="' . IMG_FILTER_NEGATE . '"';
    if (isset($_POST['effect']) && $_POST['effect'] == IMG_FILTER_NEGATE) {
        echo ' selected="selected"';
    }
    echo '>Negative</option>';
?>
    </select>
    <br/><br/>
<?php
    echo '<input type="checkbox" name="emb_caption"';
    if (isset($_POST['emb_caption'])) {
        echo ' checked="checked"';
    }
    echo '>Embed caption in image?';
    echo '<br/><br/><input type="checkbox" name="emb_logo"';
    if (isset($_POST['emb_logo'])) {
        echo ' checked="checked"';
    }
    echo '>Embed watermarked logo in image?';
?>
    <br/><br/>
    <input type="submit" value="Preview" name="submit" />
    <input type="submit" value="Save" name="submit" />
   </div>
  </form>
 </body>
</html>
<?php
}
?>


Any help appreciated.

Hello! I have this validation script that seems to work great until I add the size validation. I'm ready to pull my hair out! Can someone tell me what I'm doing wrong?

Code: [Select]
if (isset($_POST['Submit'])) {
$user_id = $userdata[user_id];
    $number_of_file_fields = 0;
    $number_of_uploaded_files = 0;
    $number_of_moved_files = 0;
    $uploaded_files = array();
$max_filesize = 5242880; // Maximum filesize in BYTES (currently 5MB).
    $upload_directory = dirname(__file__) . '/'.$user_id.'/'; //set upload directory
if (!is_dir($upload_directory)) {
    mkdir($upload_directory, 0777, true);
}

    for ($i = 0; $i < count($_FILES['images']['name']); $i++) {
        $number_of_file_fields++;
        if ($_FILES['images']['name'][$i] != '') { //check if file field empty or not
            $number_of_uploaded_files++;
if($_FILES['images']['size'] > $max_filesize){
echo "<b class='red'>Max file size is 5MB.</b><br/>";
$sz = true;
}
$ext = validate_extension($_FILES['images']['name'][$i]);
if (($ext == true) && ($sz == true)){
$uploaded_files[] = $_FILES['images']['name'][$i];
if (move_uploaded_file($_FILES['images']['tmp_name'][$i], $upload_directory . $_FILES['images']['name'][$i])) {
$number_of_moved_files++;
            }
}else { echo "<b class='red'>File extention error. Only .doc, .pdf, .jpg and .gif files are allowed. </b><br/>";
}

        }

    }
if ($number_of_uploaded_files >= 1){
echo "Number of files submitted:<b class='red>".$number_of_uploaded_files."</b><br/>";
echo "Number of successfully uploaded files:<b class='red>".$number_of_moved_files."</b><br/><br/>";
echo "Uploaded File Name(s):<br/>" . implode('<br/>', $uploaded_files);
}


}
As of now it results in every uploaded file returning the error "Max file size is 5MB."

HI All,

I have a form submission that uploads a photo as well as submitting other data.

I would like to change the name of the photo to the id of the person record (created automatically on by the database) then a hyphen, then their first name and lastname. (i am flexible on this).

This file name will also need to be submitted into the person record so the photo and the person can be linked.

I am struggling with this one - but here is the code i have so far.

 

<?php 
include 'includes/dbconn.php';

$target_dir = "img/people/";
$target_file = $target_dir . basename($_FILES["personHeadshot"]["name"]);
$uploadOk = 1;
$imageFileType = strtolower(pathinfo($target_file,PATHINFO_EXTENSION));

if ($_SERVER['REQUEST_METHOD']=='POST'){

	$fn = $_POST['fname'];
	$ln = $_POST['lname'];
	$ad1 = $_POST['ad1'];
	$ad2 = $_POST['ad2'];
	$city = $_POST['city'];
	$post = $_POST['postcode'];
	$tel = $_POST['phone'];
	$email = $_POST['email'];
	$crole = $_POST['comRole'];
	$OFA = $_POST['OFA'];
	$playerType = $_POST['playerType'];
	$team = $_POST['primaryTeam'];


	$stmt = $conn->prepare("
	                       INSERT IGNORE INTO person (fname, lname, committee_role_id, player_type_id, team_id, ad1, ad2, city, postcode, mobile, email, on_field_auth_id) 
	                       VALUES (?,?,?,?,?,?,?,?,?,?,?,?)
	                       ");
	$stmt -> bind_param(ssiiissssssi, $fn, $ln, $crole, $playerType, $team, $ad1, $ad2, $city, $post, $tel, $email, $OFA);
	$stmt -> execute();

	// Check if image file is a actual image or fake image
//photo upload
	$check = getimagesize($_FILES["personHeadshot"]["tmp_name"]);
  if($check !== false) {
    echo "File is an image - " . $check["mime"] . ".";
    $uploadOk = 1;
  } else {
    echo "File is not an image.";
    $uploadOk = 0;
  }
//photo upload

	header("location: ../admin-people-list.php");
}
// Check if file already exists
if (file_exists($target_file)) {
  echo "Sorry, file already exists.";
  $uploadOk = 0;
}

// Check file size
if ($_FILES["personHeadshot"]["size"] > 500000) {
  echo "Sorry, your file is too large.";
  $uploadOk = 0;
}

// Allow certain file formats
if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg"
&& $imageFileType != "gif" ) {
  echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";
  $uploadOk = 0;
}

// Check if $uploadOk is set to 0 by an error
if ($uploadOk == 0) {
  echo "Sorry, your file was not uploaded.";
// if everything is ok, try to upload file
} else {
  if (move_uploaded_file($_FILES["personHeadshot"]["tmp_name"], $target_file)) {
    echo "The file ". basename( $_FILES["personHeadshot"]["name"]). " has been uploaded.";
  } else {
    echo "Sorry, there was an error uploading your file.";
  }
}

 

How do I Upload Multiple Files using a PHP form and script? 10 files at one time would be great.
Ultimately I need a photo upload and management script.

Here is my current single file upload form:

<form action="upload.php" method="post"
enctype="multipart/form-data">
<label for="file">Upload a Photo:</label>
<input type="file" name="file" id="file" />
<br />
<input type="submit" name="submit" value="Submit" />
</form>

</body>
</html>


Here is the Php Script:

<?php
if ((($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/jpeg")
|| ($_FILES["file"]["type"] == "image/pjpeg"))
&& ($_FILES["file"]["size"] < 200000))
  {
  if ($_FILES["file"]["error"] > 0)
    {
    echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
    }
  else
    {
    echo "Upload: " . $_FILES["file"]["name"] . "<br />";
    echo "Type: " . $_FILES["file"]["type"] . "<br />";
    echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
    echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />";

    if (file_exists("upload/" . $_FILES["file"]["name"]))
      {
      echo $_FILES["file"]["name"] . " already exists. ";
      }
    else
      {
      move_uploaded_file($_FILES["file"]["tmp_name"],
      "uploads/" . $_FILES["file"]["name"]);
      echo "Stored in: " . "uploads/" . $_FILES["file"]["name"];
      }
    }
  }
else
  {
  echo "Invalid file";
  }
?>

Hey all

So have been working on a file upload script, it was uploading the file but also adding the path name instead of NULL to mysql when no image was to upload, that is now fixed however now it won't upload the actual image to the directory.  I tried undoing the mysql changes but it still won't upload the image to the directory.  Am testing on my own computer using xampp so no file permission issues, plus it was working before.  Any help much appreciated.

Thanks

              <?php
              $product_code = mysqli_real_escape_string($conn, $_POST['product_code']);
              $product_name = mysqli_real_escape_string($conn, $_POST['product_name']);
              $category = mysqli_real_escape_string($conn, $_POST['category']);
              $filter = mysqli_real_escape_string($conn, $_POST['filter']);
              $description = mysqli_real_escape_string($conn, $_POST['description']);
              $specification = mysqli_real_escape_string($conn, $_POST['specification']);
              $price = mysqli_real_escape_string($conn, $_POST['price']);

              $target_dir = "../images/products/";

              if (!isset ($_FILES["img1"]["name"])) {
                  $target_file1 = NULL;
              } else {
                  if (!empty($_FILES["img1"]["name"])) {
                      $target_file1 = $target_dir . basename($_FILES["img1"]["name"]);
                  } else {
                      $target_file1 = NULL;
                  }
              }

              if (!isset ($_FILES["img2"]["name"])) {
                  $target_file2 = NULL;
              } else {
                  if (!empty($_FILES["img2"]["name"])) {
                      $target_file2 = $target_dir . basename($_FILES["img2"]["name"]);
                  } else {
                      $target_file2 = NULL;
                  }
              }

              if (!isset ($_FILES["img3"]["name"])) {
                  $target_file3 = NULL;
              } else {
                  if (!empty($_FILES["img3"]["name"])) {
                      $target_file3 = $target_dir . basename($_FILES["img3"]["name"]);
                  } else {
                      $target_file3 = NULL;
                  }
              }

              if (!isset ($_FILES["img4"]["name"])) {
                  $target_file4 = NULL;
              } else {
                  if (!empty($_FILES["img4"]["name"])) {
                      $target_file4 = $target_dir . basename($_FILES["img4"]["name"]);
                  } else {
                      $target_file4 = NULL;
                  }
              }


              $uploadOk = 1;
              $imageFileType1 = strtolower(pathinfo($target_file1,PATHINFO_EXTENSION));
              $imageFileType2= strtolower(pathinfo($target_file2,PATHINFO_EXTENSION));
              $imageFileType3 = strtolower(pathinfo($target_file3,PATHINFO_EXTENSION));
              $imageFileType4 = strtolower(pathinfo($target_file4,PATHINFO_EXTENSION));

              // Check if image file is a actual image or fake image
              if(isset($_POST["submit"])) {
                $check1 = getimagesize($_FILES["img1"]["tmp_name"]);
                $check2 = getimagesize($_FILES["img2"]["tmp_name"]);
                $check3 = getimagesize($_FILES["img3"]["tmp_name"]);
                $check4 = getimagesize($_FILES["img4"]["tmp_name"]);

                if($check1 !== false) {
                  echo "File is an image - " . $check1["mime"] . ".";
                  $uploadOk = 1;
                } else {
                  echo "File is not an image.";
                  $uploadOk = 0;
                }
                if (file_exists($target_file1)) {
                  echo "Sorry, image one already exists.";
                  $uploadOk = 0;
                }
                if($imageFileType1 != "jpg" && $imageFileType1 != "png" && $imageFileType1 != "jpeg"
                && $imageFileType1 != "gif" ) {
                  echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed for img1.";
                  $uploadOk = 0;
                }
                if ($uploadOk == 0) {
                  echo "Sorry, your file was not uploaded.";
                // if everything is ok, try to upload file
                } else {
                  if (move_uploaded_file($_FILES["img1"]["tmp_name"], $target_file1)) {
                    echo "The file ". htmlspecialchars( basename( $_FILES["img1"]["name"])). " has been uploaded.";
                  } else {
                    echo "Sorry, there was an error uploading image one.";
                  }
                    }
                    echo '<br />';


                if($check2 !== false) {
                  echo "File is an image - " . $check2["mime"] . ".";
                  $uploadOk = 1;
                } else {
                  echo "File is not an image.";
                  $uploadOk = 0;
                }
                if (file_exists($target_file2)) {
                  echo "Sorry, image two already exists.";
                  $uploadOk = 0;
                }
                if($imageFileType2 != "jpg" && $imageFileType2 != "png" && $imageFileType2 != "jpeg"
                && $imageFileType2 != "gif" ) {
                  echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed for img2.";
                  $uploadOk = 0;
                }
                if (isset ($target_file2)) {
                    if ($uploadOk == 0) {
                      echo "Sorry, your file was not uploaded.";
                    // if everything is ok, try to upload file
                    } else {
                    if (move_uploaded_file($_FILES["img2"]["tmp_name"], $target_file2)) {
                      echo "The file ". htmlspecialchars( basename( $_FILES["img1"]["name"])). " has been uploaded.";
                    } else {
                      echo "Sorry, there was an error uploading image two.";
                    }
                      }
                    }
                                        echo '<br />';



                if($check3 !== false) {
                  echo "File is an image - " . $check3["mime"] . ".";
                  $uploadOk = 1;
                } else {
                  echo "File is not an image.";
                  $uploadOk = 0;
                }
                if (file_exists($target_file3)) {
                    echo "Sorry, image three already exists.";
                    $uploadOk = 0;
                  }
                  if($imageFileType3 != "jpg" && $imageFileType3 != "png" && $imageFileType3 != "jpeg"
                    && $imageFileType3 != "gif" ) {
                      echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed for img3.";
                      $uploadOk = 0;
                    }
                    if (isset ($target_file3)) {
                      if ($uploadOk == 0) {
                        echo "Sorry, your file was not uploaded.";
                      // if everything is ok, try to upload file
                      } else {
                      if (move_uploaded_file($_FILES["img3"]["tmp_name"], $target_file3)) {
                        echo "The file ". htmlspecialchars( basename( $_FILES["img3"]["name"])). " has been uploaded.";
                      } else {
                        echo "Sorry, there was an error uploading image three.";
                      }
                        }
                      }
                                          echo '<br />';


                if($check4 !== false) {
                  echo "File is an image - " . $check4["mime"] . ".";
                  $uploadOk = 1;
                } else {
                  echo "File is not an image.";
                  $uploadOk = 0;
                }
                if (file_exists($target_file4)) {
                      echo "Sorry, image four already exists.";
                      $uploadOk = 0;
                    }
                    if($imageFileType4 != "jpg" && $imageFileType4 != "png" && $imageFileType4 != "jpeg"
                      && $imageFileType4 != "gif" ) {
                        echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed for img4.";
                        $uploadOk = 0;
                      }
                      if (isset ($target_file4)) {
                        if ($uploadOk == 0) {
                          echo "Sorry, your file was not uploaded.";
                        // if everything is ok, try to upload file
                        } else {
                        if (move_uploaded_file($_FILES["img4"]["tmp_name"], $target_file4)) {
                          echo "The file ". htmlspecialchars( basename( $_FILES["img4"]["name"])). " has been uploaded.";
                        } else {
                          echo "Sorry, there was an error uploading image four.";
                        }
                      }
              }
}

  echo '<br />';

$image1 = basename($target_file1);
$image2 = basename($target_file2);
$image3 = basename($target_file3);
$image4 = basename($target_file4);


// Create connection
$conn = mysqli_connect($servername, $username, $password, $dbname);
// Check connection
if (!$conn) {
  die("Connection failed: " . mysqli_connect_error());
}
$sql = "INSERT INTO products (product_code, product_name, category, filter, description, specification, img1, img2, img3, img4, price) VALUES('$product_code', '$product_name', '$category', '$filter', '$description', '$specification', '$image1', '$image2', '$image3', '$image4', '$price')";

if (mysqli_query($conn, $sql)) {
  echo "Product Added successfully, Now on to the Sizes";
} else {
  echo "Error: " . $sql . "<br>" . mysqli_error($conn);
}
              ?>

 

Been looking on the web on and off for the past few days but can't seem to find a list of all file types that PHP (or is it Apache) appreciates.

Like when you go and upload file using a form and then it outputs:

Quote

Array
(
    [upload_file] => Array
        (
            [name] => discount_xcart_orders.csv
            [type] => text/comma-separated-values
            [tmp_name] => /tmp/phprAk2R6
            [error] => 0
            [size] => 674
        )

)



Is there an entire list of file types that this '[type] => text/comma-separated-values' falls under?

Just out of interest of course,
Jeremy.

How would i do a random file name for my upload script

Code: [Select]
$type = $_FILES['uploadedfile']['type'];
// Where the file is going to be placed
$target_path ="/***/***/public_html/****/lofslidernews/images/";

/* Add the original filename to our target path. 
Result is "/images/uploads/filename.extension" */
$target_path = $target_path . basename( $_FILES['uploadedfile']['name']);

$uploadedfile2 = $_FILES['uploadedfile']['name'];

if (empty($quicktitle) || empty($maintitle ) || empty($description ) || empty($uploadedfile))
   {
       $_SESSION["promoerror"] = "Please Select an image and enter a Quick Title, Main Title and Description!" ;
       header("Location: promo.php"); //This sets the redirection information
       //echo "Going to login.php, username or password is empty";
       exit(); //Ends the script and redirects to above
   }


$query = "INSERT INTO promotion (title, maintitle, description, image) VALUES ('$quicktitle','$maintitle','$description', '$uploadedfile2')";



$result = mysql_query($query) or die ("Error in query: $query. ".mysql_error());


if ( ( $type != "image/jpeg") && ($type != "image/gif") )

{
die ("That format is not allowed");
}
else
{
    move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path);
header("Location: promo.php");
$_SESSION["promoerror"] = "Added Successfully!";

}

how do I upload files so that the page doesn't refresh when the page submits, so that I can like add multiple files with one event so that I can info filled in but there are two forms, one with the documents, one with event info, but then the docs are linked to the event.  does this make sense?

Dear user
I write a file upload code in php, the code work's fine but it will upload the file up to 60 KB, when i try to upload more then 60 KB file then the page stuck on loading.
The problem is why it is not uploading more then 60kb file? is there any fault in my code please check it out..

My form.php code is...    

<!doctype html>
<html lang="en">
<head>
   <meta charset="UTF-8">
   <title>Document</title>
   <link rel="stylesheet" href="css/bootstrap.css"/>
  <link rel="stylesheet" href="css/bootstrap.min.css"/>
</head>
<body>
<div class="col-md-6">
<form action="upload.php" method="post" enctype="multipart/form-data">
   <label for="">Item</label><br/>
  <input type="file" name="picture" class="form-control"><br/>
   
   <label for="">Description</label><br/>
   <textarea name="description" id="" placeholder="Enter Item Description" class="form-control"  cols="50" rows="20"></textarea><br/>

    <input type="submit" name="submit" value="Upload" class="btn btn-success">
</form>
</div>
<script src="js/bootstrap.js"></script>
<script src="js/bootstrap.min.js"></script>
<script src="js/jquery-2.1.1.min.js"></script>
<body>
</html>

my upload.php code is

<?php
include 'conn.php';
$desc=$_POST['description'];
$image=$_FILES['picture'];
$image_name=$_FILES['picture']['name'];
$placed='uploads/';
if(move_uploaded_file($_FILES['picture']['tmp_name'],$placed.$image_name))
{
    $smt=$conn->prepare("INSERT INTO images(Image_Name,Description,Placed_On)VALUES('".$image_name."','".$desc."','".$placed."')");
    $smt->execute();
    header('location:form.php');
   
}
else
{
    echo 'error on uploading file';
}
?>

     

hi to everyone and sorry for my English. in a html form, a user can upload from one to four file intwo different category (A and B)

<table>
<tr>
<td><b><i>Categoria a</i><b/>
</td>
<td><b><i>Categoria b</i><b/>
</td>
</tr>
<tr>
<td style="vertical-align: top; width: 475px;"><br /><b>File 1a<b/></td>
<td style="vertical-align: top; width: 475px;"><br /><b>File 1b<b/></td>
</tr>
	<tr>
<td><br>
<input name="file" type="file">
</td>
<td><br>
<input name="file1" type="file"></td>
</tr>
	<tr>
<td> Luogo dello scatto *:<br>
<input name="luogo1" type="text"><br>
</td>
<td> Luogo dello scatto *:<br>
<input name="luogo2" type="text"> <br>
</td>
</tr>
<tr>
<td> Titolo  *:<br>
<input name="titolo1" type="text"><br>
</td>
<td> Titolo  *:<br>
<input name="titolo2" type="text"> <br>
</td>
</tr>
	
<tr>
<td style="vertical-align: top; width: 475px;"><br /><b>File 2a<b/></td>
<td style="vertical-align: top; width: 475px;"><br /><b>File 2b<b/></td>
</tr>
	<tr>
<td><br>
<input name="file2" type="file">
</td>
<td><br>
<input name="file3" type="file"></td>
</tr>

<tr>
<td> Luogo  *:<br>
<input name="luogo3" type="text"><br>
</td>
<td> Luogo *:<br>
<input name="luogo4" type="text"> <br>
</td>
</tr>
<tr>
<td> Titolo *:<br>
<input name="titolo3" type="text"><br>
</td>
<td> Titolo  *:<br>
<input name="titolo4" type="text"> <br>
</td>
</tr>

they are then passed to the upload.php file

..... for each file:

	$file_1 = rand(1000,100000)."-".$_FILES['file']['name'];
    $file_1_loc = $_FILES['file']['tmp_name'];
    $file_1_size = $_FILES['file']['size'];
    $file_1_type = $_FILES['file']['type'];    
    $folder1= "uploads/categoria_a/";
    
$file_2 = rand(1000,100000)."-".$_FILES['file1']['name'];
    $file_2_loc = $_FILES['file1']['tmp_name'];
    $file_2_size = $_FILES['file1']['size'];
    $file_2_type = $_FILES['file1']['type'];
    $folder2 = "uploads/categoria_b/";
    
and so on...
	

        
then the upload...    

                                        
                                                
if (move_uploaded_file($file_1_loc,$folder1.$final_file_1) || move_uploaded_file($file_2_loc,$folder2.$final_file_2) || move_uploaded_file($file_3_loc,$folder1.$final_file_3) || move_uploaded_file($file_4_loc,$folder2.$final_file_4))
                                                    
                                                                                    
                                                
                                                    {
                                                    $sql="INSERT INTO .. 
(here all the data entry part in the sql  table that works..... 
	 ,,,                              ','$caricateil')";
                                                    mysql_query($sql);    
	
                                        <script>
                                        alert("Invio dati eseguito correttamente. ");
                                        window.location.href='index.php?success';
                                        </script>
                                        <?php
            
                                                    } else     {
                                                            ?>
                                                            <script>
                                                            alert("Errore nell'invio dei dati");
                                                            window.history.back(1); 
                                                            </script>
                                                            <?php
                                                            }
                                                    } 
    
                                    } ......
	

well.. if I use the code
 
if (move_uploaded_file($file_1_loc,$folder 1.$final_file_1) || move_uploaded_file($file_2_loc,$folder 2.$final_file_2 )|| move_uploaded_file($file_3_loc,$folder 1.$final_file_3) || move_uploaded_file($file_4_loc,$folder 2.$final_file_4))
{
$sql="INSERT INTO ......

**Loads only the first of the 4 files** it finds even if the db is populated correctly with file name size....

If, on the other hand, I use

if (move_uploaded_file($file_1_loc,$folder 1.$final_file_1) &&amp;move_uploaded_file($file_2_loc,$folder 2.$final_file_2) && move_uploaded_file($file_3_loc,$folder 1.$final_file_3) &&amp;move_uploaded_file($file_4_loc,$folder 2.$final_file_4))

Works... but only if all 4 files are present.

However, a person can only upload one.. in position 1, 2, 3 or 4.....

If one of the 4 is empty, the upload stops. I hope I explained myself....
If I load files 1, 3 and 4, load only the first...

If I insert files 2 and 4, load only the 2 etc.
And also from error even if it uploads the first files...

I would like you to upload the files and continue the script regardless of which file is up-to-date...

I hope I have been clear.

Hello all,
I am using this script to upload file to FTP through php code, but its giving me FTP upload has failed!
Can you help?
Thanks


<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<form action="upload.php" method="post" enctype="multipart/form-data" name="form1" >
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="14%">server name </td>
<td width="75%"><input name="server" type="text" id="server">Write in the format "ftp.servername.com" </td>
<td width="11%">&nbsp;</td>
</tr>
<tr>
<td>user name </td>
<td><input name="username" type="text" id="username"></td>
<td>&nbsp;</td>
</tr>
<tr>
<td>password</td>
<td><input name="password" type="password" id="password"></td>
<td>&nbsp;</td>
</tr>
<tr>
<td>File name </td>
<td><input type="file" name="file"></td>
<td>&nbsp;</td>
</tr>
<tr>
<td><input type="submit" name="Submit" value="Upload"></td>
<td>&nbsp;</td>
<td>&nbsp;</td>
</tr>
</table>
</form>
</body>
</html>

"upload.php"

<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<?php
$ftp_server=$_POST['server'];
$ftp_user_name=$_POST['username'];
$ftp_user_pass=$_POST['password'];
$source_file=$_FILES['file']['name'];// retrieve name of the file to be uploaded
$destination_file=$source_file;
// make a connection to the ftp server
$conn_id = ftp_connect($ftp_server);

// login with username and password
$login_result = ftp_login($conn_id , $ftp_user_name , $ftp_user_pass);

// check connection
if((!$conn_id)||(!$login_result)){
echo "FTP connection has failed!" ;
echo "Attempted to connect to $ftp_server for user $ftp_user_name" ;
exit;
}else{
echo "Connected to $ftp_server, for user $ftp_user_name" ;
}

// upload the file
$upload = ftp_put($conn_id,$destination_file,$source_file,FTP_ASCII );

// check upload status
if(!$upload){
echo "FTP upload has failed!" ;
}else{
echo "Uploaded $source_file to $ftp_server as $destination_file" ;
}

// close the FTP stream
ftp_close($conn_id);
?>
</body>
</html>

I using an upload script to upload image files... but the script is not working.
I have created a folder named UPLOAD at same location where the file is present.

But my upload script is just creating a copy of upload.php script only but not the actual image.

My code is given below :
  Code: [Select]


if ((($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/jpeg")
|| ($_FILES["file"]["type"] == "image/pjpeg"))
&& ($_FILES["file"]["size"] < 20000000))
  {
  if ($_FILES["file"]["error"] > 0)
    {
    //echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
    }
  else
    {
/*
    echo "Upload: " . $_FILES["file"]["name"] . "<br />";
    echo "Type: " . $_FILES["file"]["type"] . "<br />";
    echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
    echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />";
*/
   // $_FILES["file"]["name"]=$_SESSION['id'];
    if (file_exists("upload/" . $_FILES["file"]["name"]))
      {
      echo $_FILES["file"]["name"] . " already exists. ";
      }
    else
      {
      move_uploaded_file($_FILES["file"]["tmp_name"],
      "upload/" . $_FILES["file"]["name"]);

$_SESSION['result']="SUCCESSFULLY UPDATED YOUR PROFILE";
header('location:members.php');
      }
    }
  }
else
  {
  echo "Invalid file";
  }
}




What should i do.... Do i need to have some folder to store temporary files.... ????

I have a file upload script which is working fine but i want to change the name of the uploaded file to a session varible $_session['id']... WHat should i do...

I tried to do it by writing the following the following code....

Code: [Select]
$_FILES["file"]["name"]=$_SESSION['id'];

But by this i looses the file extension...

File can be of nay type... (.pdf, .jpg, .gif, .png)

-pranshu.a.11@gmail.com

Hello, I'm trying to make a file upload script and i am getting the following errors   Errors when the script it on localhost:

Notice: Undefined variable: FILES in C:\xampp\htdocs\upload.php on line 4

Notice: Undefined variable: FILES in C:\xampp\htdocs\upload.php on line 10

Warning: getimagesize(): Filename cannot be empty in C:\xampp\htdocs\upload.php on line 10
The file you are trying to upload is not a valid iamge.Sorry, We only allow jpg, png, jpeg and gif file types to be uploaded. Please try again with a valid file.Your file was not uploaded. 


Sorry, There was an error uploading your file. 

And the errors on an actual web server: 

Warning: getimagesize() [function.getimagesize]: Filename cannot be empty in /home/thegekon/public_html/test/upload.php on line 10
The file you are trying to upload is not a valid iamge.Sorry, We only allow jpg, png, jpeg and gif file types to be uploaded. Please try again with a valid file.Your file was not uploaded. 


Sorry, There was an error uploading your file. 

Here is my html page code where the users select a file

<html lang="en"><head></head><meta charset="utf-8">

<title>PHP File Upload</title>

<body>

	<form action="upload.php" method="POST">
		
		<input type="file" name="FileToUpload" enctype="multipart/form-data" /> <BR> <BR>
		<input type="submit" name="submit" value="Upload Image" />

	</form>

</body>

</html>

And here's my upload.php page

<?php

$target_dir = "uploads/";
$target_file = $target_dir .basename($FILES["FileToUpload"]["name"]);
$uploadOk = 1;
$imageFileType = pathinfo($target_file, PATHINFO_EXTENSION);
//Check if the image is a real image or even an image at all
if(isset($_POST['submit'])) {

	$check = getimagesize($FILES["FileToUpload"]["tmp_name"]);

	if($check !== false) {

		$uploadOk = 1;
	} else {

		echo "The file you are trying to upload is not a valid iamge.";
	}

	//Restrict File Type
	if($imageFileType !== "jpg" && $imageFileType !== "png" && $imageFileType !== "jpeg" && $imageFileType !== "gif") {

		echo "Sorry, We only allow jpg, png, jpeg and gif file types to be uploaded. Please try again with a valid file.";
		$uploadOk = 0;
	}

	if($uploadOk == 0) {

		echo "Your file was not uploaded. <br><br><br>";
	}

	if(move_uploaded_file($target_file, $target_dir)) {

		echo "Your file<font color='red'>" . basename($FILES["FileToUpload"]["name"]) ."</font> has been uploaded. <br><br><br>"; 
		$uploadOk = 1;
	} else {

		echo "Sorry, There was an error uploading your file. <br><br><br>";
		$uploadOk = 0;
	}
}

?>