file uploading

JD_

im using the following script http://www.phpbuilder.com/snippet/detail.php?type=snippet&id=709 for uploading / downloading files etc , however i need to modify it so it updates my members db and puts file location in the the users record.

something like this

mysql_query("UPDATE members SET file=$absolute_path/$file_name$uname WHERE uid='$uid'");

but how do i put that into this script any help?

the section of the script need to modify is this

<title>File Upload</title>
</head>

<body>

<form method=POST action=$PHP_SELF?x=cfg&action=douploadcfg enctype=multipart/form-data>
<p>File to upload:<br>
<input type=file name=file size=30>
<p><button name=submit type=submit>
Upload
</button>
</form>
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>

</html>";
break;


//File Upload
case "douploadcfg":
$dir = "dir$uname";
if ($file != "") {

if (file_exists("$absolute_path/$file_name$uname")) {
die("File already exists");
}

if (($sizelimit == "yes") && ($file_size > $sizebytes)) {
die("File is to big. It must be $sizebytes bytes or less.");
}

$ext = strrchr($file_name,'.');
if (($extlimit == "yes") && (!in_array($ext,$limitedext))) {
die("The file you are uploading doesn't have the correct extension.");
}

@copy($file, "$absolute_path/[$uname]$file_name") or die("The file you are trying to upload couldn't be copied to the server");

} else {
die("Must select file to upload");
}
echo "
<html>
<head>
<title>File Uploaded</title>
</head>
<body>";
echo $file_name." was uploaded";
echo "<br>
<a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload Another File</a>
<a href=$PHP_SELF?x=cfg&action=downloadcfg> Download File</a>
<a href=$websiteurl> Return to $websitename</a><br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";

batman

Do it something like this:


<?
if($submit)
{
mysql_query("UPDATE members SET file=$absolute_path/$file_name$uname WHERE uid='$uid'");
}
?>

<title>File Upload</title>
</head>

<body>

<form method=POST action=$PHP_SELF?x=cfg&action=douploadcfg enctype=multipart/form-data>
<p>File to upload:<br>
<input type=file name=file size=30>
<p><button name=submit type=submit>
Upload
</button>
</form>
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>

</html>";
break;


//File Upload
case "douploadcfg":
$dir = "dir$uname";
if ($file != "") {

if (file_exists("$absolute_path/$file_name$uname")) {
die("File already exists");
}

if (($sizelimit == "yes") && ($file_size > $sizebytes)) {
die("File is to big. It must be $sizebytes bytes or less.");
}

$ext = strrchr($file_name,'.');
if (($extlimit == "yes") && (!in_array($ext,$limitedext))) {
die("The file you are uploading doesn't have the correct extension.");
}

@copy($file, "$absolute_path/[$uname]$file_name") or die("The file you are trying to upload couldn't be copied to the server");

} else {
die("Must select file to upload");
}
echo "
<html>
<head>
<title>File Uploaded</title>
</head>
<body>";
echo $file_name." was uploaded";
echo "<br>
<a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload Another File</a>
<a href=$PHP_SELF?x=cfg&action=downloadcfg> Download File</a>
<a href=$websiteurl> Return to $websitename</a><br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";

Since the page is posting to itself, then I just made it to where if the submit button is pressed then it will do the query.

-Blake

JD_

cant seem to get it to work its perhaps because of the case statements heres the full code i have a number of case statements on my site for the file uploading etc its "cfg"

case "info": 
include ("info.htm"); 
break; 

case "hardwarenews": 
include ("hardware/news.php"); 
break; 

case "cfg":
$extlimit = "yes"; //Do you want to limit the extensions of files uploaded
$limitedext = array(".cfg"); //Extensions you want files uploaded limited to.
$sizelimit = "yes"; //Do you want a size limit, yes or no?
$sizebytes = "200000"; //size limit in bytes
$dl = "http://www.quakeskills.com/usercfgs/"; //url where files are uploaded
$absolute_path = "/xxx/xxxx/xxxxx/xxx/xxx/xxxx/xxx/xxx"; //Absolute path to where files are uploaded
$websiteurl = "http://www.quakeskills.com"; //Url to you website
$websitename = "quakeskills.com";

switch($action) {
default:
echo"
<html>
<head>
<title>Upload Or Download</title>
</head>
<body>
<a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload File</a>
 <a href=$PHP_SELF?x=cfg&action=downloadcfg>Download File</a>
 <a href=$websiteurl>Return to $websitename</a>
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";
break;
case "downloadcfg":
echo "
<html>
<head>
<title>File Download</title>
</head>
<body><a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload File</a> <a href=$websiteurl>Return to $websitename</a>";
$list = "<table width=700 border=1 bordercolor=#000000 style=\"border-collapse: collapse\">";
$list .= "<tr><td width=700><center><b>Click To Download</b></center></td></tr>";
$dir = opendir($absolute_path);
while($file = readdir($dir)) {
if (($file != "..") and ($file != ".")) {
//Download files with spaces fix by Kokesh
$list .= "<tr><td width=700><a href='$dl/$file'>$file</a></center></td></tr>";
}
}
$list .= "</table>";
echo $list;
echo"
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";
break;

// Entered the code here //


case "uploadcfg": if($submit)
{
mysql_query("UPDATE members SET file=$absolute_path/$file_name$uname WHERE uid='$uid'");
}


echo"
<html>

<head>

<title>File Upload</title>
</head>

<body>

<form method=POST action=$PHP_SELF?x=cfg&action=douploadcfg enctype=multipart/form-data>
<p>File to upload:<br>
<input type=file name=file size=30>
<p><button name=submit type=submit>
Upload
</button>
</form>
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>

</html>";
break;


//File Upload
case "douploadcfg":
$dir = "dir$uname";
if ($file != "") {

if (file_exists("$absolute_path/$file_name$uname")) {
die("File already exists");
}

if (($sizelimit == "yes") && ($file_size > $sizebytes)) {
die("File is to big. It must be $sizebytes bytes or less.");
}

$ext = strrchr($file_name,'.');
if (($extlimit == "yes") && (!in_array($ext,$limitedext))) {
die("The file you are uploading doesn't have the correct extension.");
}

@copy($file, "$absolute_path/[$uname]$file_name") or die("The file you are trying to upload couldn't be copied to the server");

} else {
die("Must select file to upload");
}
echo "
<html>
<head>
<title>File Uploaded</title>
</head>
<body>";
echo $file_name." was uploaded";
echo "<br>
<a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload Another File</a>
<a href=$PHP_SELF?x=cfg&action=downloadcfg> Download File</a>
<a href=$websiteurl> Return to $websitename</a><br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";
break;

}
break; 

default: 
include ("Fusion/news.php");
} 
?>

batman

Try putting it at the very top of the page.

<?
if($submit)
{
mysql_query("UPDATE members SET file=$absolute_path/$file_name$uname WHERE uid='$uid'");
}
?>

<?
case "info": 
include ("info.htm"); 
break; 

case "hardwarenews": 
include ("hardware/news.php"); 
break; 

case "cfg":
$extlimit = "yes"; //Do you want to limit the extensions of files uploaded
$limitedext = array(".cfg"); //Extensions you want files uploaded limited to.
$sizelimit = "yes"; //Do you want a size limit, yes or no?
$sizebytes = "200000"; //size limit in bytes
$dl = "http://www.quakeskills.com/usercfgs/"; //url where files are uploaded
$absolute_path = "/xxx/xxxx/xxxxx/xxx/xxx/xxxx/xxx/xxx"; //Absolute path to where files are uploaded
$websiteurl = "http://www.quakeskills.com"; //Url to you website
$websitename = "quakeskills.com";

switch($action) {
default:
echo"
<html>
<head>
<title>Upload Or Download</title>
</head>
<body>
<a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload File</a>
 <a href=$PHP_SELF?x=cfg&action=downloadcfg>Download File</a>
 <a href=$websiteurl>Return to $websitename</a>
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";
break;
case "downloadcfg":
echo "
<html>
<head>
<title>File Download</title>
</head>
<body><a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload File</a> <a href=$websiteurl>Return to $websitename</a>";
$list = "<table width=700 border=1 bordercolor=#000000 style=\"border-collapse: collapse\">";
$list .= "<tr><td width=700><center><b>Click To Download</b></center></td></tr>";
$dir = opendir($absolute_path);
while($file = readdir($dir)) {
if (($file != "..") and ($file != ".")) {
//Download files with spaces fix by Kokesh
$list .= "<tr><td width=700><a href='$dl/$file'>$file</a></center></td></tr>";
}
}
$list .= "</table>";
echo $list;
echo"
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";
break;

// Entered the code here //


case "uploadcfg": if($submit)
{
mysql_query("UPDATE members SET file=$absolute_path/$file_name$uname WHERE uid='$uid'");
}


echo"
<html>

<head>

<title>File Upload</title>
</head>

<body>

<form method=POST action=$PHP_SELF?x=cfg&action=douploadcfg enctype=multipart/form-data>
<p>File to upload:<br>
<input type=file name=file size=30>
<p><button name=submit type=submit>
Upload
</button>
</form>
<br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>

</html>";
break;


//File Upload
case "douploadcfg":
$dir = "dir$uname";
if ($file != "") {

if (file_exists("$absolute_path/$file_name$uname")) {
die("File already exists");
}

if (($sizelimit == "yes") && ($file_size > $sizebytes)) {
die("File is too big. It must be $sizebytes bytes or less.");
}

$ext = strrchr($file_name,'.');
if (($extlimit == "yes") && (!in_array($ext,$limitedext))) {
die("The file you are uploading doesn't have the correct extension.");
}

@copy($file, "$absolute_path/[$uname]$file_name") or die("The file you are trying to upload couldn't be copied to the server");

} else {
die("Must select file to upload");
}
echo "
<html>
<head>
<title>File Uploaded</title>
</head>
<body>";
echo $file_name." was uploaded";
echo "<br>
<a href=$PHP_SELF?x=cfg&action=uploadcfg>Upload Another File</a>
<a href=$PHP_SELF?x=cfg&action=downloadcfg> Download File</a>
<a href=$websiteurl> Return to $websitename</a><br><br>
Powered by <a href=http://www.zachwhite.com/>PHP Uploader Downloader</a>
</body>
</html>";
break;

}
break; 

default: 
include ("Fusion/news.php");
} 
?>

JD_

hmm nope does the UPDATE command need to have information already in the db for it to work? ive done it like this

echo $file_name." was uploaded"; mysql_query("UPDATE members SET file=usercfgs/[$uname]$file_name WHERE uid='$uid'"); echo"should be here $absolute_path/[$uname]$file_name";

and it echos it correctly so the information must be there. ???

JD_

i think the query is wrong i tried doing this in phpmyadmin

btw i changed the field name to "filez"

UPDATE members SET filez = usercfgs WHERE uid = '1'

Error

SQL-query :

UPDATE members SET filez = usercfgs WHERE uid = '1'

MySQL said:

Unknown column 'usercfgs' in 'field list'

bad76

has you tried this way?


// ....

die("The file you are uploading doesn't have the correct extension.");
}

@copy($file, "$absolute_path/[$uname]$file_name") or die("The file you are trying to upload couldn't be copied to the server");

mysql_query("UPDATE members SET file='$absolute_path/$file_name$uname' WHERE uid='$uid'");

} else {

//....

see you

JD_

nice one thanks 🙂