PHP - Issue With Admin Image Upload

Hi   I am developing a website for fun to play around with, like a little fun project and am trying to work out how to upload multiple images that stores the filename in the database and the actual file on the server   I have managed to get it working if I upload just one image but can't work it out for multiple images   Can anyone point me in the right direction or advise where I need to adjust for multiple images upload   I know on the html form on the input tag needs to have multiple and then the name in the input tag be image[] but is as far as I get, it's the PHP I get stuck on   The html for the form is below

<form action="private-add-insert.php" method="post" enctype="multipart/form-data">
Car Make: <input type="text" name="make">
Car Model: <input type="text" name="model">
Exterior Colour: <input type="text" name="exteriorcolour">
Engine Size: <input type="text" name="enginesize">
Fuel Type: <input type="text" name="fueltype">
Year Registered: <input type="text" name="yearregistered">
Transmission: <input type="text" name="transmission">
Mileage: <input type="text" name="mileage">
Number of Doors: <input type="text" name="nodoors">
Body Style: <input type="text" name="bodystyle">
Price: <input type="text" name="price">
<br>
<label>Upload Images</label>
<input type="file" name="image[]" multiple/>
<br />
<input type="hidden" name="MAX_FILE_SIZE" value="100000" />
<br />
<input type="submit" value="Submit Listing"> 
</form>

Below is the PHP coding that processes the html form

<?php
ini_set('display_startup_errors',1);
ini_set('display_errors',1);
error_reporting(-1);
?>

<?php
// Start a session for error reporting
session_start();

// Call our connection file
require("includes/conn.php");

// Check to see if the type of file uploaded is a valid image type
function is_valid_type($file)
{
	// This is an array that holds all the valid image MIME types
	$valid_types = array("image/jpg", "image/jpeg", "image/bmp", "image/gif", "image/png");

	if (in_array($file['type'], $valid_types))
		return 1;
	return 0;
}

// Just a short function that prints out the contents of an array in a manner that's easy to read
// I used this function during debugging but it serves no purpose at run time for this example
function showContents($array)
{
	echo "<pre>";
	print_r($array);
	echo "</pre>";
}

// Set some constants

// This variable is the path to the image folder where all the images are going to be stored
// Note that there is a trailing forward slash
$TARGET_PATH = "private-listing-images/";

// Get our POSTed variables
$make = $_POST['make'];
$model = $_POST['model'];
$exteriorcolour = $_POST['exteriorcolour'];
$enginesize = $_POST['enginesize'];
$fueltype = $_POST['fueltype'];
$yearregistered = $_POST['yearregistered'];
$transmission = $_POST['transmission'];
$mileage = $_POST['mileage'];
$nodoors = $_POST['nodoors'];
$bodystyle = $_POST['bodystyle'];
$price = $_POST['price'];
$image = $_FILES['image'];

// Sanitize our inputs
$make = mysql_real_escape_string($make);
$model = mysql_real_escape_string($model);
$exteriorcolour = mysql_real_escape_string($exteriorcolour);
$enginesize = mysql_real_escape_string($enginesize);
$fueltype = mysql_real_escape_string($fueltype);
$yearregistered = mysql_real_escape_string($yearregistered);
$transmission = mysql_real_escape_string($transmission);
$mileage = mysql_real_escape_string($mileage);
$nodoors = mysql_real_escape_string($nodoors);
$bodystyle = mysql_real_escape_string($bodystyle);
$price = mysql_real_escape_string($price);
$image['name'] = mysql_real_escape_string($image['name']);

// Build our target path full string.  This is where the file will be moved do
// i.e.  images/picture.jpg
$TARGET_PATH .= $image['name'];

// Check to make sure that our file is actually an image
// You check the file type instead of the extension because the extension can easily be faked
if (!is_valid_type($image))
{
	$_SESSION['error'] = "You must upload a jpeg, gif, bmp or png";
	header("Location: private-add-listing.php");
	exit;
}

// Lets attempt to move the file from its temporary directory to its new home
if (move_uploaded_file($image['tmp_name'], $TARGET_PATH))
{
	
	// NOTE: This is where a lot of people make mistakes.
	// We are *not* putting the image into the database; we are putting a reference to the file's location on the server
	$sql = "insert into privatelistings (make, model, exteriorcolour, enginesize, fueltype, yearregistered, transmission, mileage, nodoors, bodystyle, price, filename) values ('$make', '$model', '$exteriorcolour', '$enginesize', '$fueltype', '$yearregistered', '$transmission', '$mileage', '$nodoors', '$bodystyle', '$price', '" . $image['name'] . "')";
	$result = mysql_query($sql) or die ("Could not insert data into DB: " . mysql_error());
	header("Location: private-add-listing-successfully.php?msg=Listing Added successfully");
	exit;
}
else
{
	// A common cause of file moving failures is because of bad permissions on the directory attempting to be written to
	// Make sure you chmod the directory to be writeable
	$_SESSION['error'] = "Could not upload file.  Check read/write persmissions on the directory";
	header("Location: private-add-listing.php");
	exit;
}
?>

I know the coding needs updating to mysqli and prevent sql injections but want to get it working first and then will do them parts   Thank you in advance   Kind regards   Ian

Ok, I have this code that is supposed to upload a csv file and save the contents into a specific sql table.  I am getting an error when i hit submit that states the file is empty, meaning the csv file.  I am thinking that the file isn't really being targeted i just don't know how to fix it.  To start i have a php page with a the form and then i have another php page that is included in the form php page.  The functions for submitting the csv info in the text file is located in the include file.  here is the code:

Code: [Select]
$csv = new Quick_CSV_import();

$arr_encodings = $csv->get_encodings(); //take possible encodings list
$arr_encodings["default"] = "[default database encoding]"; //set a default (when the default database encoding should be used)

if(!isset($_POST["encoding"]))
  $_POST["encoding"] = "default"; //set default encoding for the first page show (no POST vars)

if(isset($_POST["Go"]) && ""!=$_POST["Go"]) //form was submitted
{
  $csv->file_name = $HTTP_POST_FILES['file_source']['tmp_name'];
 
  //optional parameters
  $csv->use_csv_header = isset($_POST["use_csv_header"]);
  $csv->field_separate_char = $_POST["field_separate_char"][0];
  $csv->field_enclose_char = $_POST["field_enclose_char"][0];
  $csv->field_escape_char = $_POST["field_escape_char"][0];
  $csv->encoding = $_POST["encoding"];
 
  //start import now
  $csv->import();
}
else
  $_POST["use_csv_header"] = 1;
?>

<tr>
      <td>Source CSV file to import:</td>
      <td rowspan="30" width="10px">&nbsp;</td>
      <td><input type="file" name="file_source" id="file_source" class="edt" value="<?=$file_source?>"></td>
      </tr>
and

Code: [Select]
class Quick_CSV_import
{
  var $table_name = "tbl_product"; //where to import to
  var $file_name; //where to import from
  var $use_csv_header; //use first line of file OR generated columns names
  var $field_separate_char; //character to separate fields
  var $field_enclose_char; //character to enclose fields, which contain separator char into content
  var $field_escape_char;  //char to escape special symbols
  var $error; //error message
  var $arr_csv_columns; //array of columns
  var $table_exists; //flag: does table for import exist
  var $encoding; //encoding table, used to parse the incoming file. Added in 1.5 version
 
  function Quick_CSV_import()
  {
    $this->file_name = $file_name;
    $this->arr_csv_columns = array();
    $this->use_csv_header = true;
    $this->field_separate_char = ",";
    $this->field_enclose_char  = "\"";
    $this->field_escape_char   = "\\";
    $this->table_exists = false;
  }
 
  function import()
  {
    if($this->table_name=="")
      $this->table_name = "temp_".date("d_m_Y_H_i_s");
   
    $this->table_exists = false;
    $this->create_import_table();
   
    if(empty($this->arr_csv_columns))
      $this->get_csv_header_fields();
   
    /* change start. Added in 1.5 version */
    if("" != $this->encoding && "default" != $this->encoding)
      $this->set_encoding();
    /* change end */
   
    if($this->table_exists)
    {
      $sql = "LOAD DATA INFILE '".@mysql_escape_string($this->file_source).
             "' INTO TABLE `".$this-> table_name.
             "` FIELDS TERMINATED BY '".@mysql_escape_string($this->field_separate_char).
             "' OPTIONALLY ENCLOSED BY '".@mysql_escape_string($this->field_enclose_char).
             "' ESCAPED BY '".@mysql_escape_string($this->field_escape_char).
             "' ".
             ($this->use_csv_header ? " IGNORE 1 LINES " : "")
             ."(`".implode("`,`", $this->arr_csv_columns)."`)";
      $res = @mysql_query($sql);
      $this->error = mysql_error();
    }
  }
 
  //returns array of CSV file columns
  function get_csv_header_fields()
  {
    $this->arr_csv_columns = array();
    $fpointer = fopen($file_name, "r");
    if ($fpointer)
    {
      $arr = fgetcsv($fpointer, 10*1024, $this->field_separate_char);
      if(is_array($arr) && !empty($arr))
      {
        if($this->use_csv_header)
        {
          foreach($arr as $val)
            if(trim($val)!="")
              $this->arr_csv_columns[] = $val;
        }
        else
        {
          $i = 1;
          foreach($arr as $val)
            if(trim($val)!="")
              $this->arr_csv_columns[] = "column".$i++;
        }
      }
      unset($arr);
      fclose($fpointer);
    }
    else
      $this->error = "file cannot be opened: ".(""==$this->file_name ? "[empty]" : @mysql_escape_string($this->file_name));
    return $this->arr_csv_columns;
  }
i just can't figure it out.  could anyone help me out?  the error i get says this:  Warning: fopen() [function.fopen]: Filename cannot be empty in /Quick_CSV_import.php on line 83

I am trying to run the following code to upload a file. (WAMP using Win XP). Once I select the file and click submit I get the error: "Forbidden... You don't have permission to access /< on this server." with URL http://localhost/<?=$PHP_SELF?>
Code is below:

<form action="<?=$PHP_SELF?>" method="post" enctype="multipart/form-data">
<br/><br/>
Choose a file to upload:<br/>
<input type="file" name="upload_file">
<br/>
<input type="submit" name="submit" value="submit">
</form>


TIA

Hello
I am facing a rare issue while uploading videos, now the test is on .flv 7 mega and .wmv 5 mega

Not Only the file is not getting uploaded, I cannot even see the tmp_name and ize is 0

I have included:

ini_set("post_max_size", "10M");
ini_set("upload_max_filesize", "10M");

and
<input type="hidden" name="MAX_FILE_SIZE" value="100000" />

This is all locally on the localhost, nothing allows for uploading the video

Many Thanks

Hello

I am having problems uploading an image through a HTML form. I want the image to be uploaded to the server and the image name to be written to the mysql database.

Below is the code I am using:
Code: [Select]
<?php
if (isset($_POST['add'])){
   
   echo "<br /> add value is true";
      $name = $_POST['name'];   
      $description = $_POST['description'];   
      $price = $_POST['price'];
      $category_id = $_POST['category_name'];
      $image = $_FILES['image']['name'];   
      
      //file path of the image upload
      $filepath = "../images/";
      //mew name for the image upload
      $newimagename = $name;
      //new width for the image
      $newwidth = 100;
      //new height for the image
      $newheight = 100;
      
      include('../includes/image-upload.php');
      
      
      mysql_query("INSERT INTO item (item_name, item_description, item_price, item_image)
      VALUES ('$name','$description','$price','$image')"); ?>

Here is the image-upload.php file code:

Code: [Select]
<?php

//assigns the file to the image
$image =$_FILES["image"]["name"];
$uploadedfile =$_FILES["image"]["tmp_name"];

if ($image) {
   //retrieves the extension type from image upload
   $extension = getextension($image);
   //converts extension to lowercase
   $extension = strtolower($extension);
   
   //create image from uploaded file type
   if($extension=="jpg" || $extension=="jpeg") {
      $uploadedfile = $_FILES['image']['tmp_name'];
      $src = imagecreatefromjpeg($uploadedfile);
   }else if($extension=="png") {
      $uploadedfile = $_FILES['image']['tmp_name'];
      $src = imagecreatefrompng($uploadedfile);
   }else{
      $src = imagecreatefromgif($uploadedfile);
   }
   
   //creates a list of the width and height of the image
   list($width,$height)=getimagesize($uploadedfile);
   
   //adds color to the image
   $tmp = imagecreatetruecolor($newwidth,$newheight);
   
   //create image
   imagecopyresampled($tmp,$src,0,0,0,0,$newwidth,$newheight,$width,$height);
   
   //set file name
   $filename = $filepath.$newimagename.".".$extension;
   $imagename = $newimagename.".".$extension;
   //uploads new file with name to the chosen directory
   imagejpeg($tmp,$filename,100);
   
   //empty variables
   imagedestroy($src);
   imagedestroy($tmp);
   
}


?>
Any help would be appreciated, fairly new to all this!

Thanks!!!

I have a working image upload script that uploads, renames the file and adds filename to the database.

is it possible to include some sort of image resize code? if so can anyone point me in the right direction or better still show some example code and explain how it works etc.

below is my working code:

Code: [Select]
<?php
$rand = mt_rand(1,9999999);
$member_id = $_SESSION['SESS_MEMBER_ID'];
$caption = $_POST["caption"];

if(isset($_FILES['uploaded']['name']))
{
$allowed_filetypes = array('.jpg','.gif','.bmp','.png','.jpeg');
$max_filesize = 524288; // Maximum filesize in BYTES (currently 0.5MB) 
    $fileName = basename($_FILES['uploaded']['name']);
$errors = array();
$target = "gallery/";
$fileBaseName = substr($fileName, 0, strripos($fileName, '.'));

   // Get the extension from the filename.
   $ext = substr($fileName, strpos($fileName,'.'), strlen($fileName)-1); 
 
   //$newFileName = md5($fileBaseName) . $ext;
   $newFileName = $target . $rand . "_" . $member_id.$ext;
   
   // Check if filename already exists
   if(file_exists("gallery/" . $newFileName)) 
    {
     $errors[] = "The file you attempted to upload already exists, please try again.";
    }
   // Check if the filetype is allowed.
   if(!in_array($ext,$allowed_filetypes))
    {
         $errors[] = "The file you attempted to upload is not allowed.";
    }
    
// Now check the filesize.
   if(!filesize($_FILES['uploaded']['tmp_name']) > $max_filesize)
    {
         $errors[] = "The file you attempted to upload is too large.";
    }
  
    // Check if we can upload to the specified path.
   if(!is_writable($target))
    {
         $errors[] = "You cannot upload to the specified directory, please CHMOD it to 777.";
    }
 
    //Here we check that no validation errors have occured.
    if(count($errors)==0)
    {

//Try to upload it.
        if(!move_uploaded_file($_FILES['uploaded']['tmp_name'], $newFileName))
        {
            $errors[] = "Sorry, there was a problem uploading your file.";
        }
    }
    //Lets INSERT database information here
    if(count($errors)==0)
    {
$result = mysql_query("INSERT INTO `gallery` (`image`, `memberid`, `caption`) VALUES ('$newFileName', '$member_id', '$caption')")
    or die (mysql_error()); 

}
    //If no errors show confirmation message
    if(count($errors)==0)
    {
         echo "<div class='notification success png_bg'>
<a href='#' class='close'><img src='img/cross_grey_small.png' title='Close this notification' alt='close' /></a>
<div>
Image has been uploaded.<br>\n
</div>
</div>";


//echo "The file {$fileName} has been uploaded";
echo "<br>\n";
echo "<a href='gallery.php'>Go Back</a>\n";

   }
    else
    {
        //show error message
        echo "<div class='notification attention png_bg'>
<a href='#' class='close'><img src='img/cross_grey_small.png' title='Close this notification' alt='close' /></a>
<div>
Sorry your file was not uploaded due to the following errors:<br>\n
</div>
</div>";
//echo "Sorry your file was not uploaded due to the following errors:<br>\n";
        echo "<ul>\n";
        foreach($errors as $error)
        {
            echo "<li>{$error}</li>\n";
        }
        echo "</ul>\n";
echo "<br>\n";
echo "<a href='gallery.php'>Go Back</a>\n";
    }
    
}
else
{
    //Show the form
echo "Use the following form below to add a new image to your gallery;<br /><br />\n";
    echo "<form enctype='multipart/form-data' action='' method='POST'>\n";
    echo "Please choose a file:<br /><input class='text' name='uploaded' type='file' /><br />\n";
echo "Image Caption:<br /><input class='text' name='caption' type='text' value='' /><br /><br />\n";
    echo "<input class='Button' type='submit' value='Upload' />\n";
    echo "</form>\n";

}
?>
Many thanks to phpfreaks again.

hello friends,

while clicking the form all the information goes to database, I have one image upload field,
when cliking the submit button, i would like 'image name' to go in database and file to go in
/upload folder, i have tried this for hours and gave up,

if anyone help me in this, i would be very greatful

hello. I need your help please. I'm building logistics website with user panel and admin panel. I've done all login and register forms. now I want to : admin can add package with: tracking number , weight , cost , and declaration form. user can fill declaration form after admin add package to user panel. then admin can see the declared form. is it possible in php? thank you in advance

I need code for upload images for php as well as to edit that image

Hi,

Im rather new to php and really unable to get the above to work. Everything works apart from the image being resized. File is uploaded, and the image name is printed into the SQL database. But i cant for the life of me get the image to go to 300x200? If you could help me i would be very grateful

My code for the form processing page is attached. Ive put a few line breaks into the code as to where i think is the issue. I just cant seem to resize the image. Does the image resize need to come before the part it writes the image to the server or can this be done afterwards? Please help.

P.S - Thanks in advance

I'm having some trouble with an image upload form.  I have a few instances of this code that works in other areas of my site so I'm pretty sure there is just something small that I'm missing:

The Form:

<?
include("../include/session.php");
?>
<html>
<head>
<title>Template Configuration</title>
<link rel="stylesheet" type="text/css" href="../css/backend.css">
</head>
<body>
<?
if($session->logged_in){

$data = mysql_query("SELECT * FROM template WHERE id = '1'") or die(mysql_error());

while($info = mysql_fetch_array( $data ))
{
echo "
<h1 style='text-align:center;'>Template Configuration</h1>
<div id='textedit'>
<form method='post' action='templateprocess.php' enctype='multipart/form-data'>
<table>
<tr><td><h2>Header Image</h2></td></tr>
 <tr><td colspan='2' style='text-align:center'><img src='../upload/template/".$info['headerimg'] ."'><br /><br /></tr></td>
<tr>
<td>Image Upload:</td>
<td>
<input type='file' name='headerimg'>
</td>
</tr>
</table  
            <input type='hidden' name='id' value='1'>
            <input TYPE='submit' name='upload' title='Add data to the Database' value='Submit'/>
          </form>
          <a href='../main.php'><img src='../images/backButton.jpg'></a>
          </div>
          ";
}
}
else{
echo "[<a href='../main.php'>Please Login</a>] &nbsp;&nbsp;";
}
?>
</body>
</html>

The Processor:

<?
include("../include/session.php");
?>

<html>
<head>
<title>Template Configuration</title>

<link rel="stylesheet" type="text/css" href="../css/backend.css">

</head>
<body>
<div id='process'>
<?
if($session->logged_in){

$target = "/path/to/folder/upload/template/";

if ($headerimg != ''){
$headerimg = ($_FILES['headerimg']['name']);
foreach($_FILES as $file) {
    move_uploaded_file($file['tmp_name'], $target . $file['name']);
}
mysql_query("UPDATE template SET headerimg ='$headerimg' WHERE id ='1'");
}
?>
<p>Update Successful... <a href="../main.php">click here</a> to return to the administration area.</p>
<?php
}
else{
echo "[<a href='../main.php'>Please Login</a>] &nbsp;&nbsp;";
}
?> </div>
</body>
</html>

My database has a table named 'template' with two fields of 'id' and 'headerimg'.  I have inserted into the table (id) '1' and (headerimg) 'header-image.png' and is reading this as a preview above.  I can't, however, get the 'headerimg' field to update and the image never uploads into my template folder.

I have absolutely no idea how to allow users to upload their own avatars and then have the file save as their user ID (uID), and if the uID already exists, then have it overwrite it.

I have a PHP script that modifies images that are stored in a local folder related to $startingFolder.

Essentially, I can use
 $startingFolder = 'anyFolder/';
 $finalFolder = 'endResult/';

To manage the variables and direct the source and destination of the scripts actions from this starting point.

I'm trying to extend my capabilities so that I can use the script while uploading images.

Rather than UPLOAD several images to  $startingFolder and then run the script, I thought it would be more efficient to handle this in one script.

However, I am having trouble making the CONNECTION so that this can be accomplished.

What is the proper way to 'grab' the files during upload?  How can I access the files during the process?

I have a working HTML
<input type='file' name='upload[]' multiple >

And have tried
 $startingFolder = '$_FILE[upload]';
but I am missing the mark somewhere.
Please help.

 

Hey everyone -

I was wondering if there was a good tutorial or documentation on how to upload an image, have it resize and then call it back from, say, a mysql query?  Trying to make something so that users can add an image to a small news post. I tried search the tutorial but I didn't find anything.

Any past samples or suggestions are greatly appreciated.

Thanks!