PHP - Validate And Before Moving File To Directory And Get It's Name To Database(base64 Image Upload)

I have some code where i input data and upload images to a database (working 100% correctly)

However I want to expand on it - what I want is when a user uploads an image of their choice, to assign it to a directory of their choosing.

Then, when input is successful, write the directory of where the image is stored (not just the image) to the database.

Here is the code;

Code: [Select]
<?php

ini_set('display_errors',1);
error_reporting(-1);

require_once ('./includes/config.inc.php');

require_once (MYSQL);

$add_cat_errors = array();

if ($_SERVER['REQUEST_METHOD'] == 'POST')
{
// Check for a name:
if (empty($_POST['product'])) {
$add_cat_errors['product'] = 'Please enter the name!';
}

// Check for a description:
if (empty($_POST['prod_descr'])) {
$add_cat_errors['prod_descr'] = 'Please enter the description!';
}

// Check for a category:
if (!isset($_POST['cat']) || !filter_var($_POST['cat'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_product_errors['cat'] = 'Please select a category!';
}

// Check for a price:
if (empty($_POST['price']) || !filter_var($_POST['price'], FILTER_VALIDATE_FLOAT) || ($_POST['price'] <= 0)) {
$add_cat_errors['price'] = 'Please enter a valid price!';
}

// Check for an image:
if (is_uploaded_file ($_FILES['image']['tmp_name']) && ($_FILES['image']['error'] == UPLOAD_ERR_OK)) {

$file = $_FILES['image'];

$size = ROUND($file['size']/1024);

// Validate the file size:
if ($size > 512) {
$add_cat_errors['image'] = 'The uploaded file was too large.';
} 

// Validate the file type:
$allowed_mime = array ('image/jpeg', 'image/JPG', 'image/jpg');
$allowed_extensions = array ('.jpg', 'jpeg');
$image_info = getimagesize($file['tmp_name']);
$ext = substr($file['name'], -4);
if ( (!in_array($file['type'], $allowed_mime)) 
||   (!in_array($image_info['mime'], $allowed_mime) ) 
||   (!in_array($ext, $allowed_extensions) ) 
) {
$add_cat_errors['image'] = 'The uploaded file was not of the proper type.';
} 

// Move the file over, if no problems:
if (!array_key_exists('image', $add_cat_errors)) {

// Create a new name for the file:
$new_name = (string) sha1($file['name'] . uniqid('',true));

// Add the extension:
$new_name .= ((substr($ext, 0, 1) != '.') ? ".{$ext}" : $ext);

// Move the file to its proper folder but add _tmp, just in case:
$dest =  "../db/images/$new_name";

if (move_uploaded_file($file['tmp_name'], $dest)) {

// Store the data in the session for later use:
$_SESSION['image']['new_name'] = $new_name;
$_SESSION['image']['file_name'] = $file['name'];

// Print a message:
echo '<h4>The file has been uploaded!</h4>';

} else {
trigger_error('The file could not be moved.');
unlink ($file['tmp_name']);
}

} // End of array_key_exists() IF.

} elseif (!isset($_SESSION['image'])) { // No current or previous uploaded file.
switch ($_FILES['image']['error']) {
case 1:
case 2:
$add_cat_errors['image'] = 'The uploaded file was too large.';
break;
case 3:
$add_cat_errors['image'] = 'The file was only partially uploaded.';
break;
case 6:
case 7:
case 8:
$add_cat_errors['image'] = 'The file could not be uploaded due to a system error.';
break;
case 4:
default: 
$add_cat_errors['image'] = 'No file was uploaded.';
break;
} // End of SWITCH.

} // End of $_FILES IF-ELSEIF-ELSE.



// Check for a stock:
if (empty($_POST['stock']) || !filter_var($_POST['stock'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_cat_errors['stock'] = 'Please enter the quantity in stock!';
}

if (empty($add_cat_errors))
{
$query = "INSERT INTO product (product, prod_descr, catID, price, image, stock) VALUES (?, ?, ?, ?, ?, ?)";
// Prepare the statement:
$stmt = mysqli_prepare($dbc, $query);
// For debugging purposes:
// if (!$stmt) echo mysqli_stmt_error($stmt);

// Bind the variables:
mysqli_stmt_bind_param($stmt, 'sssssi', $name, $desc, $_POST['cat'], $_POST['price'], $_SESSION['image']['new_name'], $_POST['stock']);

// Make the extra variable associations:
$name = strip_tags($_POST['product']);
$desc = strip_tags($_POST['prod_descr']);
// Execute the query:
mysqli_stmt_execute($stmt);

if (mysqli_stmt_affected_rows($stmt) == 1) { // If it ran OK.

// Print a message:
echo '<h4>The product has been added!</h4>';

// Clear $_POST:
$_POST = array();

// Clear $_FILES:
$_FILES = array();

// Clear $file and $_SESSION['image']:
unset($file, $_SESSION['image']);

} else { // If it did not run OK.
trigger_error('The product could not be added due to a system error. We apologize for any inconvenience.');
unlink ($dest);
}

} // End of $errors IF.

} else { // Clear out the session on a GET request:
unset($_SESSION['image']);
} // End of the submission IF.

require_once ('./includes/form_functions.inc.php');
?>

<form enctype="multipart/form-data" action="add_product.php" method="post" accept-charset="utf-8">

<input type="hidden" name="MAX_FILE_SIZE" value="524288" />

Product<br /><?php create_form_input('product', 'text', $add_cat_errors); ?>
           
            Description<br /><?php create_form_input('prod_descr', 'textarea', $add_cat_errors); ?>
           
Category<br /><select name="cat"<?php if (array_key_exists('cat', $add_cat_errors)); ?>>
<option>Select One</option>
<?php // Retrieve all the categories and add to the pull-down menu:
$q = 'SELECT catID, cat FROM category ORDER BY cat ASC';
$r = mysqli_query ($dbc, $q);
while ($row = mysqli_fetch_array ($r, MYSQLI_NUM)) {
echo "<option value=\"$row[0]\"";
// Check for stickyness:
if (isset($_POST['cat']) && ($_POST['cat'] == $row[0]) ) echo ' selected="selected"';
echo ">$row[1]</option>\n";
}
?>
</select><?php if (array_key_exists('cat', $add_cat_errors)) echo $add_product_errors['cat']; ?>
           
            Price<br /><?php create_form_input('price', 'text', $add_cat_errors); ?>
           
            Image<br /><?php

// Check for an error:
if (array_key_exists('image', $add_cat_errors)) {

echo $add_cat_errors['image'] . '<br /><input type="file" name="image"/>';

} else { // No error.

echo '<input type="file" name="image" />';

// If the file exists (from a previous form submission but there were other errors),
// store the file info in a session and note its existence:
if (isset($_SESSION['image'])) {
echo "<br />Currently '{$_SESSION['image']['file_name']}'";
}

} // end of errors IF-ELSE.
 ?>
          <br />
<select name="select">
<option value="full_heads">db/images/full_heads</option>
<option value="human_hair">db/images/human_hair</option>
</select>

Stock<br /><?php create_form_input('stock', 'text', $add_cat_errors); ?>


<input type="submit" value="Add This Product" class="button" />


</fieldset>

</form>

How do I achieve this?

Hi, I've read a lot of places that it's not recommended to store binary files in my db.
So instead I'm supposed to upload the image to a directory, and store the link to that directory in database.

First, how would I make a form that uploads the picture to the directory (And what kinda directories are we talking?).

Secondly, how would I retrieve that link? And I guess I should rename the picture..

I'd appreciate any help, or a good tutorial (Haven't found any myself).

Can I get some help or a point in the right direction. I am trying to create a form that allows me to add, edit and delete records from a database. I can add, edit and delete if I dont include the image upload code. If I include the upload code I cant edit records without having to upload the the same image to make the record save to the database. So I can tell I have got the code processing in the wrong way, thing is I cant seem to see or grasp the flow of this, to make the corrections I need it work. Any help would be great!   Here is the form add.php code

<?php require_once ("dbconnection.php"); 
	$id="";
	$venue_name="";
	$address="";
	$city="";
	$post_code="";			
	$country_code="";
	$url="";
	$email="";
	$description="";
	$img_url="";
	$tags="";
	
	if(isset($_GET['id'])){
		$id = $_GET['id'];
		$sqlLoader="Select from venue where id=?";
		$resLoader=$db->prepare($sqlLoader);
		$resLoader->execute(array($id));		
	} 
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Add Venue Page</title>
<link href='http://fonts.googleapis.com/css?family=Droid+Sans' rel='stylesheet' type='text/css'>
<link rel="stylesheet" href="//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">
<script src="//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js"></script>
	
</head>
<body>
<div class="container">
<?php
	$sqladd="Select * from venue where id=?";
	$resadd=$db->prepare($sqladd);
	$resadd->execute(array($id));
		while($rowadd = $resadd->fetch(PDO::FETCH_ASSOC)){
		$v_id=$rowadd['id'];
		$venue_name=$rowadd['venue_name'];
		$address=$rowadd['address'];	
		$city=$rowadd['city'];
		$post_code=$rowadd['post_code'];
		$country_code=$rowadd['country_code'];
		$url=$rowadd['url'];
		$email=$rowadd['email'];
		$description=$rowadd['description'];
		$img_url=$rowadd['img_url'];
		$tags=$rowadd['tags'];
	}
?>
   <h1 class="edit-venue-title">Add Venue:</h1>
   <form role="form" enctype="multipart/form-data" method="post" name="formVenue" action="save.php">
    <input type="hidden" name="id" value="<?php echo $id; ?>"/>

	<div class="form-group">
		 	<input class="form-control" type="hidden" name="id" value="<?php echo $id; ?>"/>
		 	<p><strong>ID:</strong> <?php echo $id; ?></p>
		 	<strong>Venue Name: *</strong> 
		 	<input class="form-control" type="text" name="venue_name" value="<?php echo $venue_name; ?>"/><br/>
		 	<br/>
		 	<strong>Address: *</strong>
		 	<input class="form-control" type="text" name="address" value="<?php echo $address; ?>"/><br/>
		 	<br/>
		 	<strong>City: *</strong>
		 	<input class="form-control" type="text" name="city" value="<?php echo $city; ?>"/><br/>
		 	<br/>
		 	<strong>Post Code: *</strong>
		 	<input class="form-control" type="text" name="post_code" value="<?php echo $post_code; ?>"/><br/>
		 	<br/>
		 	<strong>Country Code: *</strong>
		 	<input class="form-control" type="text" name="country_code" value="<?php echo $country_code; ?>"/><br/>
		 	<br/>
		 	<strong>URL: *</strong>
		 	<input class="form-control" type="text" name="url" value="<?php echo $url; ?>"/><br/>
		 	<br/>
		 	<strong>Email: *</strong>
		 	<input class="form-control" type="email" name="email" value="<?php echo $email; ?>"/><br/>
		 	<br/>
		 	<strong>Description: *</strong>
		 	<textarea  class="form-control"  type="text" name="description" rows ="7" value=""><?php echo $description; ?></textarea><br/>
		 	<br/>
		 	<strong>Image Upload: *</strong>
		 	<input class="form-control" type="file" name="image" value="<?php echo $img_url; ?>"/>
		 	      		<small>File sizes 300kb's and below 500px height and width.<br/><strong>Image is required or data will not save.</strong></small>	 	<br/><br/>
		 	<strong>Tags: *</strong>
		 	<input class="form-control" type="text" name="tags" value="<?php echo $tags; ?>"/><small>comma seperated vales only, e.g. soul,hip-hop,reggae</small><br/>
		 	<br/>
 			<p>* Required</p>
 			<br/>
 			<input  class="btn btn-primary" type="submit" name="submit" value="Save">

	 </div>

    </form>
</div>
</body>
</html>

Here is the save.php code

<?php	
error_reporting(E_ALL);
  ini_set("display_errors", 1);
	include ("dbconnection.php");
	$venue_name=$_POST['venue_name'];
	$address=$_POST['address'];
	$city=$_POST['city'];
	$post_code=$_POST['post_code'];
	$country_code=$_POST['country_code'];
	$url=$_POST['url'];
	$email=$_POST['email'];
	$description=$_POST['description'];
	$tags=$_POST['tags'];
	$id=$_POST['id'];

	if(is_uploaded_file($_FILES['image']['tmp_name'])){ 
    $folder = "images/hs-venues/"; 
    $file = basename( $_FILES['image']['name']); 
    $full_path = $folder.$file; 
    if(move_uploaded_file($_FILES['image']['tmp_name'], $full_path)) { 
    //echo "succesful upload, we have an image!";
    var_dump($_POST);



		if($id==null){

				$sql="INSERT INTO venue(venue_name,address,city,post_code,country_code,url,email,description,img_url,tags)values(:venue_name,:address,:city,:post_code,:country_code,:url,:email,:description,:img_url,:tags)";
				$qry=$db->prepare($sql);
				$qry->execute(array(':venue_name'=>$venue_name,':address'=>$address,':city'=>$city,':post_code'=>$post_code,':country_code'=>$country_code,':url'=>$url,':email'=>$email,':description'=>$description,':img_url'=>$full_path,':tags'=>$tags));
		}else{
				$sql="UPDATE venue SET venue_name=?, address=?, city=?, post_code=?, country_code=?, url=?, email=?, description=?, img_url=?, tags=? where id=?";
				$qry=$db->prepare($sql);
				$qry->execute(array($venue_name, $address, $city, $post_code, $country_code, $url, $email, $description, $full_path, $tags, $id));
				}

		if($success){
			var_dump($_POST);
            echo "<script language='javascript' type='text/javascript'>alert('Successfully Saved!')</script>";
            echo "<script language='javascript' type='text/javascript'>window.open('index.php','_self')</script>";
        	}
        
        

        else{
        	var_dump($_POST);
            echo "<script language='javascript' type='text/javascript'>alert('Successfully Saved!')</script>";
            echo "<script language='javascript' type='text/javascript'>window.open('index.php','_self')</script>";
    		}
    	
    	} //if uploaded
    	
    	else{ 
    		var_dump($_POST);
            echo "<script language='javascript' type='text/javascript'>alert('Upload Recieved but Processed Failed!')</script>";
            echo "<script language='javascript' type='text/javascript'>window.open('index.php','_self')</script>";
    		} 
		
		} //move uploaded
			else{
			var_dump($_POST);
            echo "<script language='javascript' type='text/javascript'>alert('Successfully Updated.')</script>";
            echo "<script language='javascript' type='text/javascript'>window.open('index.php','_self')</script>";
			} 

	?>

Thanks in advance!
Edited by hankmoody, 12 August 2014 - 05:15 PM.

hi-
i'm trying to browse for a CSV file and then upload it to my mysql database. i found the code below and not working. i don't get any errors. the connection to the database is ok bcz i get the existing results but not the ones from the CSV file added to the db.. any ideas?

Code: [Select]
<?php 
ob_start();
require_once('../../connections/congif.php');
mysql_select_db($dbname, $db);
$sql_get_project="SELECT * 
 FROM gifts_tbl  
 ORDER BY autoID DESC 
 LIMIT 25";
$get_project = mysql_query($sql_get_project, $db) or die(mysql_error());
$row_get_project = mysql_fetch_assoc($get_project);

//database connect info here

//check for file upload
if(isset($_FILES['csv_file']) && is_uploaded_file($_FILES['csv_file']['tmp_name'])){

//upload directory
$upload_dir = "csv_dir/";

//create file name
$file_path = $upload_dir . $_FILES['csv_file']['name'];

//move uploaded file to upload dir
if (!move_uploaded_file($_FILES['csv_file']['tmp_name'], $file_path)) {

//error moving upload file
echo "Error moving file upload";

}

//open the csv file for reading
$handle = fopen($file_path, 'r');

//turn off autocommit and delete the product table
mysql_query("BEGIN");

while (($data = fgetcsv($handle, 1000, ',')) !== FALSE) {

//Access field data in $data array ex.
$name = $data[0];

//Use data to insert into db
$sql = sprintf("INSERT INTO gifts_tbl (player_id) VALUES ('%s)",
mysql_real_escape_string($name)
);
mysql_query($sql) or (mysql_query("ROLLBACK") and die(mysql_error() . " - $sql"));
}

unlink($file_path);
}
ob_flush();
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Gifts</title>
</head>

<body>
<h1>Testing for CSV upload</h1>

<form action="" method="post">
<input type="file" name="csv_file">
<input type="submit" name="csv_submit" value="Upload CSV File">
</form>


<h2>Results</h2>
<?php do { ?>
<ul>
<li><?php echo $row_get_project['player_id']; ?></li>
</ul>
<?php } while ($row_get_project = mysql_fetch_assoc($get_project)); ?>


</body>
</html>

Hi,

I have a form that allows a user to enter details and also to upload a image. The form works great and inserts into the database if i dont include the file input.

What i would like happen is:

The user enters details and selects a file

The file then gets uploaded to ../images and the path is then written to bedroom1 variable

The addresses and the bedroom1 variable that now holds the uploaded file path e.g. images/test.jpg is written to the database

Form
Code: [Select]
<form action="admin.php" method="POST">
   <table>
     <tr><td>
     Address 1:
</td><td>
     <input type="text" name="address1" id="address1" onfocus="selected(this)" onblur="notselected(this)">
</td><td>
     <div id="dynamicText1">
             </div>
</td></tr>

<tr><td>
     Address 2:
</td><td>
     <input type="text" name="address2" id="address2" onfocus="selected(this)" onblur="notselected(this)">
</td><td>
     <div id="dynamicText1">
             </div>
</td></tr>

<tr><td>
     County:
</td><td>
     <input type="text" name="county" id="county" onfocus="selected(this)" onblur="notselected(this)">
</td><td>
     <div id="dynamicText1">
             </div>
</td></tr>

<tr><td>
     Bedroom 1:
</td><td>
     <input type="file" name="bedroom1" id="bedroom1" input name="uploadedfile">
</td><td>
     <div id="dynamicText1">
             </div>
</td></tr>



<tr><td>
     <input type="submit" name="submitaddapartment" value="Add" id="registerbutton">
</td></tr>

   </table
           
        </form>

And the php code to add it to the database


Code: [Select]
<?php
  //get variables
  $submitaddapartment = $_POST['submitaddapartment'];
  $address1 = strip_tags($_POST['address1']);
  $address2 =  strip_tags($_POST['address2']);
  $county = strip_tags($_POST['county']);
  $bedroom1 = strip_tags($_POST['bedroom1']);
   
  
  

  if ($submitaddapartment) //if submit button was pressed
  {
    if ($address1&&$address2&&$county&&$bedroom1&&) //if fields arn't blank
    {
  include 'dbase.php'; //connect to database
  
  if ((($_FILES["bedroom1"]["type"] == "image/gif")
  || ($_FILES["bedroom1"]["type"] == "image/jpg")
  || ($_FILES["bedroom1"]["type"] == "image/pjpeg"))
  && ($_FILES["bedroom1"]["size"] < 20000000))
  {

  if ($_FILES["bedroom1"]["error"] > 0)
  {
  echo "Return Code: " . $_FILES["bedroom1"]["error"] . "<br />";
  }
  else
  {
  echo "Upload: " . $_FILES["bedroom1"]["name"] . "<br />";
  echo "Type: " . $_FILES["bedroom1"]["type"] . "<br />";
  echo "Size: " . ($_FILES["bedroom1"]["size"] / 1024) . " Kb<br />";
  echo "Temp file: " . $_FILES["bedroom1"]["tmp_name"] . "<br />";
  
  if (file_exists("../images/" . $_FILES["bedroom1"]["name"]))
      {
      echo $_FILES["bedroom1"]["name"] . " already exists. ";
      }
  else
      {
      move_uploaded_file($_FILES["bedroom1"]["tmp_name"],
      "/" . $_FILES["bedroom1"]["name"]);
      echo "Stored in: " . "../images/" . $_FILES["bedroom1"]["name"];
  $bedroom1=".'images/.' $_FILES["bedroom1"]["name"]";  
  }
  }
  }
  
  else
  {
  echo "Invalid file";
  }
  
  
  mysql_query ("INSERT INTO user VALUES(NULL,'$address1','$address2','$county','$bedroom1')");
          
    }
    else
    {
    }
  }    
  
?>
Any help would be greatly appreciated.

Thanks

Fred

i need to upload files to a different folder dependint on option in form, make thumbnails, and store title and src for image and thumb in database table dependant on category. i think i'm pretty close, but there's still something wrong.

Here is my upload form :

Code: [Select]
<form enctype="multipart/form-data" action="upload.php" method="POST">
 Photo: <input type="file" name="photo"><br>
 Category: <select name="cat">
<option value="weddings">Weddings</option>
<option value="music">Music</option>
<option value="portraits">Portraits</option></select>
Title: <input type="text" name="title"><br>
 <input type="submit" value="Upload photo">
 </form>
form processed by upload.php :
Code: [Select]
<?php 
 
 require "db.php";
 
 //Get form info 
 $name=$_POST['name']; 
 $title=$_POST['title']; 
 $category=$_POST['cat']; 
 $pic=($_FILES['photo']['name']); 
 //set target dir source file width height
 $target = $cat."/"; 
 $src = $target . basename( $_FILES['photo']['name']); 
 $destination = $cat."/thumbs";
 $thumbsrc = $destination . basename( $_FILES['photo']['name']); 
 $width = 200;
 $height = 200;
    header("content-type: image/jpeg");
    $src_img = imagecreatefromjpeg("$src");
    $srcsize = getimagesize("$dest");
    $dst_img = imagecreatetruecolor($width, $height);

    imagecopyresampled($dst_img, $src_img, 0, 0, 0, 0, $width, $height, $srcsize[0], $srcsize[1]);
    imagejpeg($dst_img);
    
 //Unstert into db
 mysql_query("INSERT INTO `$category` VALUES ('$name', 'Stitle', '$src, $thumbsrc')") ; 
 
 //move photo 
 if(move_uploaded_file($_FILES['photo']['tmp_name'], $fulltarget)) 
 { 
 //Ok 
 echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded, and your information has been added to the directory"; 
 } 
 else { 
 
 //not ok 
 echo "Sorry, there was a problem uploading your file."; 
 } 
 ?>

call a script from main page
Code: [Select]
<div class="gallery">
 <?php include "weddings/get.php" ?>
 </div>
 <div class="gallery">
 <?php include "music/get.php" ?>
 </div>

get.php displays links

Code: [Select]
<?php
include "db.php"; 
$cat = weddings;
$q = "SELECT id, title, src, thumbsrc FROM $cat";

$result = $mysqli->query($q) or die(mysqli_error($mysqli));

if ($result) {
    
    echo "<ul id='photos'> \n";
    
    while ($row = $result->fetch_object()) {
   
        $title = $row->title;
        $src = $row->src;
        $thsrc = $row->thumbsrc;
        $id = $row->id;
        
        echo "<a href='$src' class="lightbox" rel="$cat" title="$name - $title"><img src='$thsrc' id='$id'      alt='$name' /></a>":
        }    
        
        echo "</ul>";
    

    
}



?>   
I think i'm going along the right sort of path, but i'm not sure.

hello friends,

while clicking the form all the information goes to database, I have one image upload field,
when cliking the submit button, i would like 'image name' to go in database and file to go in
/upload folder, i have tried this for hours and gave up,

if anyone help me in this, i would be very greatful

hi all

i need a script that will allow me upload images to 2 dif folders on my server and then add the info to my database along with some other form data.
iv been looking all over for code or scripts for days now and have been playing with cut and copyed code but no look

again any help i will be greatful for as im a noob to php but al learning quick

here is my html form

Code: [Select]

<html>
<body>

<form action="add.php" method="post">
Project Name: <input type="text" name="pro_name" /><br>
Thumbnail: <input type="file" name="thumbnail" /><br> ////// this image to ../thum
Short Details: <input type="text" name="short_details" /><br>
Full Details: <input type="text" name="full_details" /><br>
Category: <input type="text" name="cat" /><br>
Image1: <input type="file" name="image1" /><br>//// and image1,2,3,4 to ../images
Image2: <input type="file" name="image2" /><br>
Image3: <input type="file" name="image3" /><br>
Image4: <input type="file" name="image4" /><br>
<input type="submit" />
</form></body></html>
here is my code for add.php witch only adds the info to the DB

Code: [Select]
<?php
error_reporting(E_ALL);

include ("../includes/db_config.php");

$con = mysql_connect($db_hostname,$db_username,$db_password);
@mysql_select_db($db_database) or die( "Unable to select database");

$sql="INSERT INTO $db_table (pro_name, thumbnail, short_details, full_details, cat, image1, image2, image3, image4)
VALUES
('$_POST[pro_name]','$_POST[thumbnail]','$_POST[short_details]','$_POST[full_details]','$_POST[cat]','$_POST[image1]','$_POST[image2]','$_POST[image3]','$_POST[image4]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "1 record added";

mysql_close($con)


?>

hi,
i have a form that requires image to be uploaded.
i know how to store the form values in a database but i don't know how to store the image into the database.
i want the user to upload picture and preview the data provided review (including the image) before submitting to the database.

thanks

Hello freaks!

Im new to this forum, but im not all that new to PHP and MySQL.
Although there's been some years since the last time I used it, so don't go all freaky on me if I dont do this right

Let's go on-topic:
Im in progress of making an internal web-page for me and my colleagues to make things a bit easier for us.
I am making an database of our different projects, and I need some help with the input form - as I need to upload an image to the server, and store the path in the MySQL database.

In my input form, I need to store information from text fields, and I need to upload an image to the server and store the path in the database.
Before I can even start to code this (although I have coded the input forum without the upload), I need to know what would be the best way to do this.
I guess there are several ways.. What would the expert do (That's you right?)?

Should I have the information input, and image upload in the same form, or should I make a second form (maybe on a different page) for the upload?
Is it necessary with two tables, one for the info and one for the image path, and then tie them together with the imageID, or is it fine to use just one table?

Any thoughts would be appreciated!

<!-- TechThat -->

I have a directory in public WWW. The files throughout the directory have many PHP includes amongst themselves. For example, the file "registration.php" begins with require('../parameters.php');

The directory is complex, like this:

/Public WWW directory/
        /My_Directory
            parameters.php
            another_reg.php
                /app
                    files.inc
                     files2.inc
                    /morefiles
                    another.inc
                    another2.inc
                    /css
                mycss.css
                /pages
                config.php
                registration.php
            
My question: I want the entire directory moved out of reach above the public WWW, but I want "registration.php" to go into the public WWW.

How would I do that without breaking all the include paths? (I know the solution is probably a one-liner involving __DIR__  ... but I can't seem to code it so it works).

Thank you!!

 

I am in the process of writing a CMS for a friend that is looking to add a classified section to his site. He will be the only one that will ever use it.

I got the code to work with one image when he asked me if I could do it so he could post 6 images for each item. I am unable to figure out how to do this. I was told to do this with a while loop.

This is the code that I have written so far.

<?php

//Check to make sure title is filled in. If not redirects to show_add.php
if (!$_POST[title]) {
header("Location: show_add.php");
exit;
} else {
//check and see if a session has started
session_start();
}
//if session has not been properly started redirects back to the administration menu
if ($_SESSION[valid] != "yes") {
header("Location: admin_menu.php");
exit;
}

include('includes/connection.php');


//check and see if the type of uploaded file is an image
function is_valid_type($file) {
$valid_types = array("image/jpg", "image/jpeg", "image/gif", "image/bmp");

if (in_array($file['type'], $valid_types))
return 1;
return 0;
}

//Set Constants
$TARGET_PATH = "/home/content/m/i/k/mikedmartiny/html/db_images/";

$title = $_POST['title'];
$year = $_POST['year'];
$make = $_POST['make'];
$model = $_POST['model'];
$descript = $_POST['descript'];
$image = $_FILES['image'];

//Sanitize the inputs
$title = mysql_real_escape_string($title);
$year = mysql_real_escape_string($year);
$make = mysql_real_escape_string($make);
$model = mysql_real_escape_string($model);
$descript = mysql_real_escape_string($descript);
$image['name'] = mysql_real_escape_string($image['name']);

//$target_path full string
$TARGET_PATH .= $image['name'];

//make sure that all fields from form are filled in
if ( $title == "" || $year == "" || $make =="" || $model == "" || $descript == "" || $image['name'] == "") {
$_SESSION['error']  = "ALL FIELDS ARE REQUIRED!";
header ("Location: show_add.php");
exit;
}

//check to make sure it has the right file type
if (!is_valid_type($image)){
$_SESSION['error'] = "You must upload a jpeg, gif, or bmp";
header ("Location: show_add.php");
exit;
}

//check to see if a file with that name exsists
if (file_exists($TARGET_PATH)){
$_SESSION['error'] = "A FILE WITH THAT NAME ALL READY EXIST!";
header ("Location: show_add.php");
exit;
}

//move the image - write path to database
while($image <=2) {
move_uploaded_file($image['tmp_name'], $TARGET_PATH)
} else {
// Make sure you chmod the directory to be writeable
$_SESSION['error'] = "COULD NOT UPLOAD FILE. CHECK WRITE/REWRITE PERMISSIONS ON THE FILE DIRECTORY!";
header ("Location: show_add.php");
exit;
}

$sql = "INSERT INTO $table (id, title, year, make, model, descript, image, image_two) VALUES ('', '$_POST[title]', '$_POST[year]', '$_POST[make]', '$_POST[model]', '$_POST[descript]', '" . $image['name'] . "', '" . $image['name'] . "')";

$result = mysql_query($sql) or die ("Could not insert data into DB: " . mysql_error());

?>


I only have it set up to work with 2 images right now. I thought it would be easier to get it to work properly. Then I could just add in the rest of the info later.

Any help would be greatly appreciated.

Hi I am new to PHP...
I wanted to design a banner.. the require data should be entered by user like Name of a banner, Details as well as Image to display on it.

I think for this I may need to use file upload option.. I tried this but $Files not working for me... some times its shows diff errors on diff browsers, I am new to PHP I dont know what is the prob.

I dont have any code on this... if anyone have any tutorial on this, that will be the gr8 help as I am trying to solve this from last 1 and 1/2 week..

I used http://www.tizag.com/phpT/fileupload.php
its showing error msg There was an error uploading the file, please try again!

Thanks in adavnce

I have a flash application that calls php script to do the image file upload and save the image in jpg format in thumbnail size. I swear it worked at one time, and then as I tried to figure out how to covert other image formats that are not currently built-in in php library (createimagefrom... functions), I played around with it a little bit, then it doesn't upload file any more!!! What I got, is that NONE of the image files is saved in my designated image folders, subsequently the flash application comes up with a broken image link.  PLEASE HELP! MANY THANKS!

Here's the relevant flash code:
Code: [Select]
private function uploadFiles():void
{
var curTime:Date = new Date();
timeStamp = curTime.valueOf().toString();
var variables:URLVariables = new URLVariables("timeStamp=" + timeStamp);

  var request:URLRequest = new URLRequest(ModelLocator.getInstance().serverPath+"uploadArtImages.php");
request.method = URLRequestMethod.POST;
request.data = variables;
file.upload(request);
  Application.application.showLoading();
}
Here's my php script: (it's really a simple script, a big chunk of it is just some functions that does error checking and image conversions)


<?php

$timeStamp = $_POST['timeStamp'];
$file = $_FILES['Filedata'];
$tempFile = $file['tmp_name'];
$fileName = $file['name'];
$fileSize = $file['size'];

$errorCode = 0; //0: success
$allowedExtensions = array("jpg", "bmp", "png", "gif", "tif", "ps", "eps", "pdf");
$mime = array('image/gif' => 'gif',
                  'image/jpeg' => 'jpg',
                  'image/png' => 'png',
                  'application/x-shockwave-flash' => 'swf',
                  'image/psd' => 'psd',
                  'image/bmp' => 'bmp',
                  'image/tiff' => 'tif',
                  'image/jp2' => 'jp2',
                  'image/iff' => 'iff',
                  'image/vnd.wap.wbmp' => 'bmp',
                  'image/xbm' => 'xbm',
                  'image/vnd.microsoft.icon' => 'ico');

public function imagecreatefrombmp($p_sFile)
{
        //    Load the image into a string
        $file    =    fopen($p_sFile,"rb");
        $read    =    fread($file,10);
        while(!feof($file)&&($read<>""))
            $read    .=    fread($file,1024);
       
        $temp    =    unpack("H*",$read);
        $hex    =    $temp[1];
        $header    =    substr($hex,0,108);
       
        //    Process the header
        //    Structu  http://www.fastgraph.com/help/bmp_header_format.html
        if (substr($header,0,4)=="424d")
        {
            //    Cut it in parts of 2 bytes
            $header_parts    =    str_split($header,2);
           
            //    Get the width        4 bytes
            $width            =    hexdec($header_parts[19].$header_parts[18]);
           
            //    Get the height        4 bytes
            $height            =    hexdec($header_parts[23].$header_parts[22]);
           
            //    Unset the header params
            unset($header_parts);
        }
       
        //    Define starting X and Y
        $x                =    0;
        $y                =    1;
       
        //    Create newimage
        $image            =    imagecreatetruecolor($width,$height);
       
        //    Grab the body from the image
        $body            =    substr($hex,108);

        //    Calculate if padding at the end-line is needed
        //    Divided by two to keep overview.
        //    1 byte = 2 HEX-chars
        $body_size        =    (strlen($body)/2);
        $header_size    =    ($width*$height);

        //    Use end-line padding? Only when needed
        $usePadding        =    ($body_size>($header_size*3)+4);
       
        //    Using a for-loop with index-calculation instaid of str_split to avoid large memory consumption
        //    Calculate the next DWORD-position in the body
        for ($i=0;$i<$body_size;$i+=3)
        {
            //    Calculate line-ending and padding
            if ($x>=$width)
            {
                //    If padding needed, ignore image-padding
                //    Shift i to the ending of the current 32-bit-block
                if ($usePadding)
                    $i    +=    $width%4;
               
                //    Reset horizontal position
                $x    =    0;
               
                //    Raise the height-position (bottom-up)
                $y++;
               
                //    Reached the image-height? Break the for-loop
                if ($y>$height)
                    break;
            }
           
            //    Calculation of the RGB-pixel (defined as BGR in image-data)
            //    Define $i_pos as absolute position in the body
            $i_pos    =    $i*2;
            $r        =    hexdec($body[$i_pos+4].$body[$i_pos+5]);
            $g        =    hexdec($body[$i_pos+2].$body[$i_pos+3]);
            $b        =    hexdec($body[$i_pos].$body[$i_pos+1]);
           
            //    Calculate and draw the pixel
            $color    =    imagecolorallocate($image,$r,$g,$b);
            imagesetpixel($image,$x,$height-$y,$color);
           
            //    Raise the horizontal position
            $x++;
        }
       
        //    Unset the body / free the memory
        unset($body);
       
        //    Return image-object
        return $image;
}

function ValidateImageFile($input_file, &$width, &$height, &$type) {
  global $allowedExtensions;
  global $mime;
  global $errorCode;
  
  $errorCode = 0; //reset
  $width = 0;
  $height = 0;
  $type = 0;
  $file_info = getimagesize($input_file['tmp_name']);
  if(!$file_info || empty($file_info)) { // No Image?
    //$error = "The uploaded file doesn't seem to be an image.";
    $errorCode = 1;
    return FALSE;
  } else { // An Image? check extension
    // Get File Extension (if any)
    $file_name = $input_file['name'];
    $dotExt = strrchr($file_name, ".");
    if (!$dotExt) { //no extension found
     $errorCode = 2;
     return FALSE;
    } else {
     $ext = strtolower(substr($dotExt, 1));
     $ext = ($ext == 'jpeg') ? 'jpg' : $ext; //convert jpeg to jpg
     $ext = ($ext == 'tiff') ? 'tif' : $ext;
      if(!in_array($ext, $allowedExtensions)) { //has extension, but invalid
        //$error .= "You must upload a file with one of the following extensions: ".$exts;
        $errorCode = 2;
        return FALSE;
      } else {
        $file_mime = $file_info['mime'];        
        //if($ext == 'jpc' || $ext == 'jpx' || $ext == 'jb2') {
        //  $extension = $ext;
        //} else {
        //  $extension = ($mime[$file_mime] == 'jpeg') ? 'jpg' : $mime[$file_mime];
        //}
        //if(!$extension) {
        //  $extension = '';
        //  $file_name = str_replace('.', '', $file_name);
        //}
        if (strcmp($mime[$file_mime], $ext)) {
         $errorCode = 3;
         return FALSE; //strcmp non zero, mime type doesn't match ext, error!
        }
    }
  }
}
  $width = $file_info[0];
  $height = $file_info[1];
  $type = $file_info[2];
  return TRUE;
}

//  $w_dst = maximum width of thumbnail
//  $h_dst = maximum height of thumbnail
//  $n_img = new thumbnail name
function ConvertPic($w_dst, $h_dst, $new_img, $file_src, $w_src, $h_src, $type_src)
{
ini_set('memory_limit', '100M');   //  handle large images
   unlink($new_img);         //  remove old images if present
  
   if ($w_src > $w_dst || $h_src > $h_dst) {
   $ratio = $w_src/$h_src;
   if ($w_dst/$h_dst > $ratio) {$w_dst = floor($h_dst*$ratio);} else {$h_dst = floor($w_dst/$ratio);}
  } else {
   $w_dst = $w_src;
   $h_dst = $h_src;
  }

   switch ($type_src)
     {case 1: //IMAGETYPE_GIF:   // 1:  gif -> jpg
        $img_src = imagecreatefromgif($file_src);
        break;
      case 2: //IMAGETYPE_JPEG:   // 2:  jpeg -> jpg
        $img_src = imagecreatefromjpeg($file_src);
        break;
      //case IMAGETYPE_JPEG2000:
      //  $img_src = imagecreatefromjpeg($file_src);
      //  break;
      case 3: //IMAGETYPE_PNG:  // 3:  png -> jpg
        $img_src = imagecreatefrompng($file_src);
        break;
      case IMAGETYPE_WBMP: // wbmp -> jpg
        $img_src = imagecreatefromwbmp($file_src);
        break;
      case IMAGETYPE_XBM:
        $img_src = imagecreatefromxbm($file_src);
        break;
      case IMAGETYPE_BMP:
        $img_src = imagecreatefrombmp($file_src);
        break;
     }
   $img_dst = imagecreatetruecolor($w_dst, $h_dst);  //  resample
  
   imagecopyresampled($img_dst, $img_src, 0, 0, 0, 0, $w_dst, $h_dst, $w_src, $h_src);
   imagejpeg($img_dst, $new_img);    //  save new image, always jpg

   imagedestroy($img_src);       
   imagedestroy($img_dst);
}

$uploadFileName = '';
if($file['error'] == UPLOAD_ERR_OK) {
$width = 0;
$height = 0;
$type = 0;
$dir = "./art_images/";
$dirThumb = "./art_images_thumb/";
  if(ValidateImageFile($file, $width, $height, $type)) {
    # Do uploading here
    // make a unique filename for the uploaded file and check it is not already
    // taken... if it is already taken keep trying until we find a vacant one
    // sample filename: 1140732936-filename.jpg
    //$now = time();
    //$uploadFileName = $now.'-'.$fileName;
    //while(file_exists($dir.$uploadFileName)) {
    //  $now++;
    //  $uploadFileName = $now.'-'.$fileName;
    //}
    $uploadFileName = $timeStamp . '-' . $fileName;
    unlink($dir . $uploadFileName); //make sure there's no exist file
    if (!move_uploaded_file($tempFile, $dir . $uploadFileName)) {
     //echo "cannot move file, nothing uploaded";
     $errorCode = 4;
    } else {
     ConvertPic(150, 150, $dirThumb . $uploadFileName, $dir . $uploadFileName, $width, $height, $type);
     //echo $uploadFileName;
    }
  } else {
   //echo "file not valid" . $errorCode;
  }
} else {
//echo "upload error";
$errorCode = 5;
}

?>

Code: [Select]
echo '<img src="data:image/jpg/png/jpeg;base64,' . base64_encode( $row['image'] ) . '" height="150" />';
This is showing up images great in firefox, safari and chrome, but in internet explorer it shows a nice red cross, and I assume it is because of the encoding?

Does anyone know how to get working in internet explorer as well?

Pretty urgent job!

Much appreciated for your help!