uploading a file and inserting (storing) it in database.

ali_p

Hi
i have a table in my database that will contain a title and the body of it which will be an uploaded file. I know the basics of how to upload a file to a specified folder and i know how to insert records into a database, but i do not know how to put the two together and get a database which sees the uploaded file as part of its record.
Can anyone help me out here.

Thanks in advance😕

Kudose

Storing images in DB is not really the best thing to do. You should create the upload script, then after the successful upload take the image name and add it to the DB.

Something like this:

$file = $_FILES['userfile']['name'];
//upload script
mysql_query("INSERT INTO tablename (fieldname) VALUES ('$file')") or die(mysql_error());

Then just call it in arrays later as you need it. Simple as:

$query = mysql_query("SELECT * FROM tablename WHERE image='$file'") or die(mysql_error());
$row = mysql_fetch_array($query);
$file = $row['image'];

echo "$file";

Hope that helps some.

ali_p

thanks for that that helps a great deal, can i just show you my code as i have been experiencing an error when inserting. This is the error message:

You have an error in your SQL syntax near ''', '19/ 02/ 2004', 'Richard Parker', 'testy boots', 'C:\PHP\uploadtemp\php232.' at line 1

And this is the code:

<?
// the path to the uploads folder
$file_dir = "c:/wwwroot/unitech/uploads/";

foreach($FILES as $file_name => $file_array) {
print "path: ".$file_array['tmp_name']."<br>\n";
print "name: ".$file_array['name']."<br>\n";
print "type: ".$file_array['type']."<br>\n";
print "size: ".$file_array['size']."<br>\n";

if (is_uploaded_file($file_array['tmp_name'])){
	move_uploaded_file($file_array['tmp_name'],
		"$file_dir/$file_array[name]") or die ("couldn't copy");
		print "file was moved!<br><br>";
}

}

//now to take the uploaded doc and put path into database

$file = $file_array['tmp_name'];

$conn = mysql_connect("$glob_host", "$glob_user", "$glob_pass")
or die(mysql_error());
mysql_select_db("unitech",$conn) or die(mysql_error());

//create and issue the query
$sql = "INSERT INTO p_docs('', '$POST[date]', '$POST[section]', '$POST[doc_title]', '$file', '$POST[status]')";
$result = mysql_query($sql,$conn)or die(mysql_error());

Kind Regards

TTT

you have incorrect sql syntax, correct is:

INSERT INTO table (field1,field2) VALUES($var1,$var2)

and date format is wrong, correct is:

date("Y-m-d"); // 2004-02-19

Kudose

TTT got it. If you need anymore help I would be willing to divulge my upload script in efforts to assist you.

ali_p

Beautiful !!
thanks.
Now i have the data for the uploaded file stored in my database as a medium blob, is this the correct type to use for this type of data? as eventually i would like the file to be availble for download from the web in the format that it is.

Big thanks

Kudose

I would set it as VARCHAR with a lenth of 36 or so. BLOBS leave you vunerable to DB attacks. Do you really need a file name to be an infinte amount of characters?

ali_p

Cule
you've been a great help!!