How do you associate files with an ID??

MobiTec

Hi guys... ive noticed on some site they associate there files with an ID..

eg: www.mysite.com/files/view.php?id=#1234

i'm wanting to know how to do this????

because i'm wanting to allow users to download pics, and by clicking
on any of the file names, i want it to open to the 1 page (like view.php) and show the picture..

Can anyone help me on this please???? 🙂

planetsim

basically its a database things..

You have a field called ID.

the reason your getting a link e.g. index.php?id=1000 is because its getting ID of 1000 to display

The Query would look similar to this

"SELECT * FROM mytable WHERE id = '".$_GET['id']."'"

MobiTec

so how do i add an ID to all my files???

because i dont want to be writing a sepperate page for each file,
i want to have 1 page and call the files to it

Sayonara

Your database table stores a list of filenames with the associated IDs, one ID to each file.

The page that calls the file gets the ?ID= variable from the URL and then selects the filename from the row in the database that has that ID.

Then it redirects the page to "storage_directory_filepath/" . $row['FILENAME']

Does that make sense?

Anarchyh

You wouldn't even have to use a database. An associative array populated with ID's as keys and filename as value could be used.

okuto1973

Name your pictures as numbers ex (1.imm,2.imm ....but you can also change the extension.....)
Now your php file must be like this one:

view.php

<img src="<?=$ID?>.imm">

The file will show you the pictures chosen passing to the file the variable ID.
Example:

view.php?ID=1
will show the image 1.imm

In this way you have no need of database access....and all things go better (velocity!)

Anarchyh

Originally posted by okuto1973
Name your pictures as numbers ex (1.imm,2.imm ....but you can also change the extension.....)
Now your php file must be like this one:

view.php
<img src="<?=$ID?>.imm">
The file will show you the pictures chosen passing to the file the variable ID.
Example:

view.php?ID=1
will show the image 1.imm

In this way you have no need of database access....and all things go better (velocity!) [/B]

You could use that method but please make sure you check the validity of 'ID' before use otherwise an attacker could retrieve files from your server.

weekender

hi mobitec

i don't know if all the others have missed a point, or whether i'm being over patronising with this, but i think you may mean how do you get the id from the url?

if you open a page with a url such as view.php?id=1000, php creates a global array called $_GET, with all the url variables (after the ?) in.

So if you call view.php?id=1000&size=large, then in your view.php you can use the following

$id = $_GET['id'];
$size = $_GET['size'];

or you can just use

extract($_GET);

to extract the array into variables

hope that helped

MobiTec

Cheers guys, thats very helpfull...

but 1 other thing, how can i validate the ID? and how can i stop attackers??

okuto1973

Originally posted by Anarchyh
You could use that method but please make sure you check the validity of 'ID' before use otherwise an attacker could retrieve files from your server.

Well....how can do that?
The php page always write an <img src="1.imm"> for example
with the extension .imm and you could also put all images in a directory called fotos....and load from there.......

Changing the ID from a number to a file name what could do?
for example if i write:

view.php?ID=a.txt

and it show an image.....i know that a.txt exist?
Well.....it search for a.txt.imm!
Let me explain!