PHP - Help Validating Uploaded Files

Hi all,

Im trying to move files that im uploading from my main domain to a sub domain. I think I can achieve this using passthru?

Im having issues with this, can any one point me in the right direction please?

Thanks, Phil

hi everyone

i am currently making my website with an uploadform. The upload function is working, but now i am trying to make the site remember the last 5 uploads. The filenames should appear in an array:
$aotf[0]
$aotf[1]
$aotf[2]
$aotf[3]
$aotf[4]
and since all files that can be/are uploaded are images, i want them to be drawed next to each other, each 128x128. THAT is working, but the fetch for images doesn't. When an image is uploaded, i execute this code:
    $readhandle=fopen("uploaddb.log","r");
    $aotf=fread($handle,filesize("uploaddb.log"));
    fclose($readhandle);
    $writehandle=fopen("uploaddb.log","w");
    fwrite($writehandle,"$aotf\r\n" . "uploadform/gebruikers/" . $naam);
    fclose($writehandle);
then,there is some html code, and then there is this code:

$aotf=explode("/n",$aotf);
for($i = count($aotf) - 5; $i <= count($aotf); $i++) {
echo ' <img src="'. $aotf[$i] . '" width="128" height="128"> ';
}

when i open the page, all img src's are empty. The writing works, and the folder of the image is 7777 chmod and the images draw on the screen, but not as the last uploaded. Does anyone know how to make this work? maybe even without a fwrite?


Thank you,

masterens

EDIT: i cannot use mysql

Hi,

I have limited experience of using PHP, but having done some searching around it would seem that it is possible to convert audio files that are uploaded through a web page to mp3 using ffmpeg. The audio files would be uploaded using the Uploadify script to subfolders that are named according to the user's login.

I would need the PHP script to be able to process all audio files that are either not in MP3 format, or are in MP3 format but greater than 192kbps, deleting the original file after the conversion. Am I right in thinking that this could be achieved using PHP, and if so, can anyone get me started with some code, or a link to a webpage with some code?

Also, I am currently using Hostpapa for hosting my website, and I understand that they don't include ffmpeg, and also don't allow ssh. I read on one website that I could still install a compiled version of ffmpeg on a shared server, but I am not sure if this means that it would work on Hostpapa, or whether I would need to change my host to get ffmpeg working.

Any advice on any of this would be welcome!

Thanks,

Nick

Hi

Basically I've built a CMS where by my clients can upload a number of images. On the success page I want to display the images they uploaded by file name.

The issue is the number of images can vary. They may upload 2 or 10 or 50 etc.

So far I've come up with this:

Code: [Select]
// number of files
$UN = 3; //I've set this to 3 for now, but this is passed from the upload page!

// server directories and directory names
$dir = '../properties';

$images = glob($dir.'/*.{jpg}', GLOB_BRACE); //formats to look for

$num_of_files = $UN; //number of images to display from number of uploaded files

foreach($images as $image)
{
$num_of_files--;

$newest_mtime = 0;
$image = 'BROKEN';
if ($handle = @opendir($dir)) {
while (false !== ($file = readdir($handle))) {
if (($file != '.') && ($file != '..')) {
$mtime = filemtime("$dir/$file");
if ($mtime > $newest_mtime) {
$newest_mtime = $mtime;
$image = "$file";
}
}
}
}

if($num_of_files > -1) //this made me laugh when I wrote it
echo $trimmed = ltrim($image, "../properties").'<br />'; //display images
else
break;
}
Without this piece of code:

Code: [Select]
$newest_mtime = 0;
$image = 'BROKEN';
if ($handle = @opendir($dir)) {
while (false !== ($file = readdir($handle))) {
if (($file != '.') && ($file != '..')) {
$mtime = filemtime("$dir/$file");
if ($mtime > $newest_mtime) {
$newest_mtime = $mtime;
$image = "$file";
}
}
}
}
It shows the first 3 files alphabetically. I want to view the last number of images added.

With the above code it simply shows the last image added 3 times!

So I need to get the time each image was added and then order by the newest added and limit to the number of images uploaded. Any suggestions please?

Kindest regards
Glynn

i am trying to create a small script that will let you   1. Create a PDF from form fields then email that pdf without saving it (was using fpdf for this) 2. within that form there is a file upload - i want to send these along with the pdf crerated in the same email.   this is my code so far, the php sends fine but it is sending in 2 seperate emails and i want it all to send in one   any help would be much apprichated as i am a compleat noob at PHP!

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Email Attachment Without Upload - Excellent Web World</title>
<style>
body{ font-family:Arial, Helvetica, sans-serif; font-size:13px;}
th{ background:#999999; text-align:right; vertical-align:top;}
input{ width:181px;}
</style>
</head>
<body>
    <form action="emailSend.php" method="post" name="mainform" enctype="multipart/form-data"> 
    <table width="500" border="0" cellpadding="5" cellspacing="5">
       <tr>
        <th>Your Name</th>
        <td><input name="fieldFormName" type="text"></td>
    </tr>
    <tr>
    <tr>
        <th>Your Email</th>
        <td><input name="fieldFormEmail" type="text"></td>
    </tr>
    <tr>
        <th>To Email</th>
        <td><input name="toEmail" type="text"></td>
    </tr>
 
    <tr>
        <th>Subject</th>
        <td><input name="fieldSubject" type="text" id="fieldSubject"></td>
    </tr>
    <tr>
        <th>Comments</th>
        <td><textarea name="fieldDescription" cols="20" rows="4" id="fieldDescription"></textarea></td>
    </tr>
    <tr>
      <th>Attach Your File</th>
      <td><input name="attachment" type="file"></td>
    </tr>
    <tr>
        <td colspan="2" style="text-align:center;"><input type="submit" name="Submit" value="Send"><input type="reset" name="Reset" value="Reset"></td>
    </tr>
    </table>
    </form>
</body>
</html>

<?php
 
//create PDF and send
// download fpdf class (http://fpdf.org)
require("fpdf.php");
// fpdf object
$pdf = new FPDF();
// generate a simple PDF (for more info, see http://fpdf.org/en/tutorial/)
$pdf->AddPage();
$pdf->SetFont("Arial","B",14);
$pdf->Cell(40,10, "this is a pdf example");
// email stuff (change data below)
$to = "me@domain.com";
$from = "me@domain.com";
$subject = "send email with pdf attachment";
$message = "<p>Please see the attachment.</p>";
// a random hash will be necessary to send mixed content
$separator = md5(time());
// carriage return type (we use a PHP end of line constant)
$eol = PHP_EOL;
// attachment name
$filename = "example.pdf";
// encode data (puts attachment in proper format)
$pdfdoc = $pdf->Output("", "S");
$attachment = chunk_split(base64_encode($pdfdoc));
// main header (multipart mandatory)
$headers = "From: ".$from.$eol;
$headers .= "MIME-Version: 1.0".$eol;
$headers .= "Content-Type: multipart/mixed; boundary=\"".$separator."\"".$eol.$eol;
$headers .= "Content-Transfer-Encoding: 7bit".$eol;
$headers .= "This is a MIME encoded message.".$eol.$eol;
// message
$headers .= "--".$separator.$eol;
$headers .= "Content-Type: text/html; charset=\"iso-8859-1\"".$eol;
$headers .= "Content-Transfer-Encoding: 8bit".$eol.$eol;
$headers .= $message.$eol.$eol;
// attachment
$headers .= "--".$separator.$eol;
$headers .= "Content-Type: application/octet-stream; name=\"".$filename."\"".$eol;
$headers .= "Content-Transfer-Encoding: base64".$eol;
$headers .= "Content-Disposition: attachment".$eol.$eol;
$headers .= $attachment.$eol.$eol;
$headers .= "--".$separator."--";
// send message
mail($to, $subject, "", $headers);



//send uploaded attachments via email
 
$to = $_POST['toEmail'];
$fromEmail = $_POST['fieldFormEmail'];
$fromName = $_POST['fieldFormName'];
$subject = $_POST['fieldSubject'];
$message = $_POST['fieldDescription'];
 
/* GET File Variables */
$tmpName = $_FILES['attachment']['tmp_name'];
$fileType = $_FILES['attachment']['type'];
$fileName = $_FILES['attachment']['name'];
 
/* Start of headers */
$headers = "From: $fromName";
 
if (file($tmpName)) {
  /* Reading file ('rb' = read binary)  */
  $file = fopen($tmpName,'rb');
  $data = fread($file,filesize($tmpName));
  fclose($file);
 
  /* a boundary string */
  $randomVal = md5(time());
  $mimeBoundary = "==Multipart_Boundary_x{$randomVal}x";
 
  /* Header for File Attachment */
  $headers .= "\nMIME-Version: 1.0\n";
  $headers .= "Content-Type: multipart/mixed;\n" ;
  $headers .= " boundary=\"{$mimeBoundary}\"";
 
  /* Multipart Boundary above message */
  $message = "This is a multi-part message in MIME format.\n\n" .
  "--{$mimeBoundary}\n" .
  "Content-Type: text/plain; charset=\"iso-8859-1\"\n" .
  "Content-Transfer-Encoding: 7bit\n\n" .
  $message . "\n\n";
 
  /* Encoding file data */
  $data = chunk_split(base64_encode($data));
 
  /* Adding attchment-file to message*/
  $message .= "--{$mimeBoundary}\n" .
  "Content-Type: {$fileType};\n" .
  " name=\"{$fileName}\"\n" .
  "Content-Transfer-Encoding: base64\n\n" .
  $data . "\n\n" .
  "--{$mimeBoundary}--\n";
}
 
$flgchk = mail ("$to", "$subject", "$message", "$headers");
 
if($flgchk){
  echo "A email has been sent to: $to";
 }
else{
  echo "Error in Email sending";
}
?>

show list of files uploaded by current session user to the database. I want to show different users when they log in to the website...they can see a list of old files that they have uploaded. can anyone tell me the code/script to this.....please, ty

Hello


I have a simple question about file handling...


Is it possible to list all files in directories / subdirectories, and then read ALL files in those dirs,
and put the content of their file into an array?

Like this:

array:
[SomePath/test.php] = "All In this php file is being read by a new smart function!";
[SomePath/Weird/hello.txt = "Hello world. This is me and im just trying to get some help!";

and so on, until no further files exists in that rootdir.

All my attempts went totally crazy and none of them works... therefore i need to ask you for help.


Do you have any ideas how to do this?
If so, how can I be able to do it?


Thanks in Advance, pros

So far I have managed to create an upload process which uploads a picture, updates the database on file location and then tries to upload the db a 2nd time to update the Thumbnails file location (i tried updating the thumbnails location in one go and for some reason this causes failure)

But the main problem is that it doesn't upload some files

Here is my upload.php

<?php
include 'dbconnect.php';

$statusMsg = '';

$Title = $conn -> real_escape_string($_POST['Title']) ; 
$BodyText = $conn -> real_escape_string($_POST['ThreadBody']) ; 
	 

// File upload path
$targetDir = "upload/";
$fileName = basename($_FILES["file"]["name"]);
$targetFilePath = $targetDir . $fileName;
$fileType = pathinfo($targetFilePath,PATHINFO_EXTENSION);
$Thumbnail = "upload/Thumbnails/'$fileName'";

if(isset($_POST["submit"]) && !empty($_FILES["file"]["name"])){
    // Allow certain file formats
    $allowTypes = array('jpg','png','jpeg','gif','pdf', "webm", "mp4");
    if(in_array($fileType, $allowTypes)){

        // Upload file to server
        if(move_uploaded_file($_FILES["file"]["tmp_name"], $targetFilePath)){

            // Insert image file name into database
            $insert = $conn->query("INSERT into Threads (Title, ThreadBody, filename) VALUES ('$Title', '$BodyText', '$fileName')");
            if($insert){
               $statusMsg = "The file ".$fileName. " has been uploaded successfully."; 

		$targetFilePathArg = escapeshellarg($targetFilePath);
		$output=null;
		$retval=null;
		 //exec("convert $targetFilePathArg -resize 300x200 ./upload/Thumbnails/'$fileName'", $output, $retval);
		 exec("convert $targetFilePathArg -resize 200x200 $Thumbnail", $output, $retval);
		echo "REturned with status $retval and output:\n" ; 
		if ($retval == null) { 
		echo "Retval is null\n" ;
		echo "Thumbnail equals $Thumbnail\n" ; 
		}

            }else{
                $statusMsg = "File upload failed, please try again.";
            } 
        }else{
            $statusMsg = "Sorry, there was an error uploading your file.";
        }
    }else{
        $statusMsg = 'Sorry, only JPG, JPEG, PNG, GIF, mp4, webm & PDF files are allowed to upload.';
    }
}else{
    $statusMsg = 'Please select a file to upload.';
}

//Update SQL db by setting the thumbnail column to equal $Thumbnail
$update = $conn->query("update Threads set thumbnail = '$Thumbnail' where filename = '$fileName'");
            if($update){
               $statusMsg = "Updated the thumbnail to sql correctly.";
		echo $statusMsg ;  } 
else 
{ echo "\n Failed to update Thumbnail. Thumbnail equals $Thumbnail" ; } 


// Display status message
echo $statusMsg;
?>

And this does work on most files however it is not working on a 9.9mb png file  which is named "test.png" I tested on another 3.3 mb gif file and that failed too?

For some reason it returns the following

Updated the thumbnail to sql correctly.Updated the thumbnail to sql correctly.

Whereas on the files it works on it returns

REturned with status 0 and output: Retval is null Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif' Failed to update Thumbnail. Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif'The file rainbow-trh-stache.gif has been uploaded successfully.

Any idea on why this is?

Hello,

I have a form for uploading CV files into a CV database.

Once the files are uploaded to their directory (e.g. www.jobsboard.com/cvdatabase/) please could someone tell me how to restrict access to users?

e.g. once a user logs into their userpanel they should be able to click on a hyperlink to download a CV e.g. (www.jobsboard.com/cvdatabase/CV1.doc) but a user who isn't logged in shouldn't be able to access www.jobsboard.com/cvdatabase/CV1.doc

Please could you tell me whether this is possible?

Many thanks,

Stu

I am using WPSQT plugin in my blog site .I code some files in PHP also.how to add that files in plugin files.  

Hi everyone!! 

I have looked into how the upload script works and this is what i have:

Code: [Select]
<?php
 if ((($_FILES["file"]["type"] == "image/gif")
 || ($_FILES["file"]["type"] == "image/jpeg")
 || ($_FILES["file"]["type"] == "image/pjpeg"))
 && ($_FILES["file"]["size"] < 20000))
   {
   if ($_FILES["file"]["error"] > 0)
     {
     echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
     }
   else
     {
     echo "Upload: " . $_FILES["file"]["name"] . "<br />";
     echo "Type: " . $_FILES["file"]["type"] . "<br />";
     echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
     echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />";
 
    if (file_exists("upload/" . $_FILES["file"]["name"]))
       {
       echo $_FILES["file"]["name"] . " already exists. ";
       }
     else
       {
       move_uploaded_file($_FILES["file"]["tmp_name"],
       "upload/" . $_FILES["file"]["name"]);
       echo "Stored in: " . "upload/" . $_FILES["file"]["name"];
       }
     }
   }
 else
   {
   echo "Invalid file";
   }
 ?>

Which is un-tested at the moment, but let's just say for talking sake it worked 100% what elements of this script would i be looking at to display the files uploaded on to another page, in my case my homepage?

ive found as to yet, that the uploads have to be stored on a file somewhere on my server, which i've set up. But i thought it would be just as easy to have a field in my table named upload and display it within the table next to the other results? instead i just get whatever the file name is named.jpg.

Any help in looking towards the answer? many thanks in advance guys!

Hi everyone,

I am after a scrpit/function that will get information of an uploaded image, resize it, then display the manipulated image.

in my "upload" script, there will be a size limit and a file extension/type limit to:  600 x 200px / jpg, gif, jpeg... this is to keep the script i'm after more simple. As using vector images i'm told is such a complicated problem for me at this time.

So...

to get the size info/dimensions its like this:


Code: [Select]
<?php

list($width, $height, $type, $attr) = getimagesize("image_name.jpg");

echo "Image width " .$width;
echo "<BR>";
echo "Image height " .$height;
echo "<BR>";
echo "Image type " .$type;
echo "<BR>";
echo "Attribute " .$attr;

?>

and..... resize something like this:

Code: [Select]
function get_image_sizes($sourceImageFilePath,
  $maxResizeWidth, $maxResizeHeight) {

  // Get width and height of original image
  $size = getimagesize($sourceImageFilePath);
  if($size === FALSE) return FALSE; // Error
  $origWidth = $size[0];
  $origHeight = $size[1];

  // Change dimensions to fit maximum width and height
  $resizedWidth = $origWidth;
  $resizedHeight = $origHeight;
  if($resizedWidth > $maxResizeWidth) {
    $aspectRatio = $maxResizeWidth / $resizedWidth;
    $resizedWidth = round($aspectRatio * $resizedWidth);
    $resizedHeight = round($aspectRatio * $resizedHeight);
  }
  if($resizedHeight > $maxResizeHeight) {
    $aspectRatio = $maxResizeHeight / $resizedHeight;
    $resizedWidth = round($aspectRatio * $resizedWidth);
    $resizedHeight = round($aspectRatio * $resizedHeight);
  }
 
  // Return an array with the original and resized dimensions
  return array($origWidth, $origHeight, $resizedWidth,
    $resizedHeight);
}

// Get dimensions
$sizes = get_image_sizes($sourceImageFilePath, $maxResizeWidth,
  $maxResizeHeight);
$origWidth = $sizes[0];
$origHeight = $sizes[1];
$resizedWidth = $sizes[2];
$resizedHeight = $sizes[3];

// Create the resized image
$imageOutput = imagecreatetruecolor($resizedWidth,
    $resizedHeight);
if($imageOutput === FALSE) return FALSE; // Error condition

// Load the source image
$imageSource = imagecreatefromjpeg($sourceImageFilePath);
if($imageSource === FALSE) return FALSE; // Error condition

$result = imagecopyresampled($imageOutput, $imageSource,
    0, 0, 0, 0, $resizedWidth, $resizedHeight, $origWidth,
    $origHeight);
if($result === FALSE) return false; // Error condition

// Write out the JPEG file with the highest quality value
$result = imagejpeg($imageOutput, $outputPath, 100);
if($result === FALSE) return false; // Error condition




And.... display is this:

Code: [Select]
<?php 
$database="***"; 
mysql_connect ("***", "***", "***"); 
@mysql_select_db($database) or die( "Unable to select database"); 
$result = mysql_query( "SELECT company_name, location, postcode, basicpackage_description, premiumuser_description, upload FROM Companies" ) 
or die("SELECT Error: ".mysql_error()); 
$num_rows = mysql_num_rows($result); 
print "\n\n\nThere are $num_rows records.<P>"; 
echo "<table><tr><th>Comppany Name</th><th>Location</th><th>Postcode</th><th>Basic Members</th><th>Upgraded Users</th><th>Company Logo</th></tr><tr><td></td><td></td><td></td><td></td><td></td><td></td></tr>";// store the records into $row array and loop through 
while ( $row = mysql_fetch_array( 
$result, MYSQL_ASSOC ) ) {
// Print out the contents of the entry  
echo "<tr><td>{$row['company_name']}</td>";
echo "<td>{$row['location']}</td>"; 
echo "<td>{$row['postcode']}</td>"; 
echo "<td>{$row['basicpackage_description']}</td>"; 
echo "<td>{$row['premiumuser_description']}</td>"; 

echo "<td><img src=\"http://www.removalspace.com/images/COMPANIES{$row['upload']}\" alt=\"logo\" /></td></tr>";} 
echo "</table>";
?>



How will all these fit together in one script?  any help i'd love it! many thanks in advance

Why does the following code not detect the following file? After I select a file and I click upload, it goes back to the upload form.


<?php
include_once("includes/config.php");

//grab their type
if(!$_COOKIE['user'])
{

//they are a guest

$info = "Guest";
}
else
{

//they are a user

$info = $_COOKIE['user'];
}


if(!$_FILE['file'])
{

$content = '<form action="submit.php" method="post" enctype="multipart/form-data">
<label for="file">SELECT SKIN:</label>
<input type="file" name="file" id="file" />
<input type="submit" name="submit" value="Submit" />
</form>';
}
else
{

if($_FILES['file']['error'] > 0)

{

$content = "There was an error trying to upload the skin ".$_FILES['file']['name'].".".$_FILES['file']['error'];

}

}

?>
<html>
<head>
<title><?php $title; ?></title>
<link rel="stylesheet" type="text/css" href="theme/style.css" />
</head>
<body>
<div id="header">

MCSkins
</div>

<?php echo "Submitting as: ".$info."<br/><br/>".$content; ?>
</body>
</html>

My photo files are not being displayed in my table?

They get sent to the mySQL database, then the server and it does grab all the other variables in the table and displays them, but the .jpg's are not shown, instead theres just the file name??

Code: [Select]
<?php 
 error_reporting(E_ALL);
 ini_set("display_errors", 1);
 echo '<pre>' . print_r($_FILES, true) . '</pre>';

 
 //This is the directory where images will be saved 
 $target = "/home/users/web/b109/ipg.removalspacecom/images/COMPANIES"; 
 $target = $target . basename( $_FILES['upload']['name']); 
 
 //This gets all the other information from the form 
 $company_name=$_POST['company_name']; 
 $basicpackage_description=$_POST['basicpackage_description']; 
 $location=$_POST['location']; 
 $postcode=$_POST['postcode'];
 $upload=($_FILES['upload']['name']); 
 
 // Connects to your Database 
 mysql_connect("server****", "username***", "password****") or die(mysql_error()) ; 
 mysql_select_db("DB") or die(mysql_error()) ; 
 
 //Writes the information to the database 
 mysql_query("INSERT INTO `Companies` (company_name, basicpackage_description, location, postcode,  upload) VALUES ('$company_name', '$basicpackage_description', '$location', '$postcode',  '$upload')") ; 
 echo mysql_error();
 
 //Writes the photo to the server 
 if(move_uploaded_file($_FILES['upload']['tmp_name'], $target)) 
 { 
 
 //Tells you if its all ok 
 echo "The file ". basename( $_FILES['upload']['name']). " has been uploaded, and your information has been added to the directory"; 
 } 
 else { 
 
 //Gives and error if its not 
 echo "Sorry, there was a problem uploading your file."; 
 } 
 ?>

"upload" is the variable that isnt displaying in my table how i want it to? Have you guys any ideas how to get it displayed correctly?

Hi

I need to change the name of a file being uploaded by a user. The reason i need this is because there is a strong possibility that duplicate filenames would be logged.

This is the code i have currently:

Code: [Select]
   $upload_path = 'cv/'; // The place the files will be uploaded to (currently a 'files' directory).

   $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension).
   $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.

   // Check if we can upload to the specified path, if not DIE and inform the user.
   if(!is_writable($upload_path))
  die('You cannot upload to the specified directory, please CHMOD it to 777.');

   // Upload the file to your specified path.
   if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $filename));

This code works fine to upload the file in the current name.

I assume i need to seperate the filename from the file extension, and i can then assign a new variable to the filename. Easier said than done though as Ive tried many combinations of things.

Is there a simple way using this script? or will i need to start from scratch?

Cheers