Image Upload Help

jbachris

I have this script to help me upload images:

<? 

require ( "xxxx" );

if ( $_POST['submit'] ) {

$sql = "INSERT INTO images(img_name, img_desc, img_date) VALUES('" . $_POST['thefile'] . "','" . $_POST['description'] . "',NOW())";
(move_uploaded_file ($_FILES['thefile']['tmp_name'], "images/uploads/{$_FILES['thefile']['name']}"));


header ( "Location: test.php" );
exit;	
} ?>
<form action="test.php" enctype="multipart/form-data" method="POST">
<input type="file" name="thefile" />
<br />
<input type="text" name="description" />
<br /><br />
<input id="submit" type="submit" name="submit" value="Upload This File" />
</form>

Right now, when I try to use the form nothing works. It doesn't upload the image nor does it save it to the database. What did I do wrong? Also, I'd like, if possible for the PHP to generate a random 10-letter name for the image and upload it as that image name and save that image name in the DB.

Volitics

See if this thread helps:

http://www.phpbuilder.com/board/showthread.php?t=10324050

You've got to 1). open the image file, 2). read the data stream from the image file, and then 3). apply the addslashes() function or the MySQL database won't let the INSERT query work.

Also, you might want to consider having two pages - one for the form and another for the upload script. The way you've got it will work just fine but it makes it simplier (IMO) to have two pages for uploading an image.

Cheers.

jbachris

So I can have, upload_image.php

// Page One - upload_image.php
<form enctype="multipart/form-data" action="upload_image2.php" method="post">
<input type="hidden" name="MAX_FILE_SIZE" value="1000000">
<input name="UserFile" type="file" size="25">
<input name="fileDescription" type="text" size="20">
<input type="submit" name="Submit" value="Upload Picture">
</form>

Then have upload_image2.php:

<?

require ( "xxxx" );

if ( $_POST['submit'] ) { 

$FileData = addslashes(fread(fopen($UserFile, "rb"), filesize($UserFile)));
$sql = "INSERT INTO images(img_name, img_desc, img_date) VALUES('$FileData','" . $_POST['description'] . "',NOW())";