Image Upload PHP Code-Please Help.

jv1025

Hello,

I will preface this by saying, I am no programmer by any means, so please be nice. I would like to add an image upload code to my website. Could someone please give me step by step instructions? I would like to have a form that runs on php and mysql. I use dreamhost as my hosting company. I would like the form to have the following fields which a user inputs the text in "" is what I would like the text on the form to say:

"Picture To Upload. JPG images only can be uploaded (click browse and the picture file from your hard drive)" <Browse Button> //Browse button here which the user clicks on and can search for the picture in their hard drive. I only want them to be able to upload a JPG image.

"Your first name"<First Name Box>

"Country State City (optional)"<Box to put country state city>//This field as it says could be optional for the user.

"Tell us a little bit about the picture (this will appear beneath the image when posted)."<Big Square Comment Box>//here's where they can type what they want

"Your Email Address (optional I will only use this to tell you when your picture has been posted)"<box to put email address in>//Again as you can see, I just want this to be an optional field.

<Submit Photo Button>//Then of course the button they push to submit the photo and any other information they filled out in the boxes.

I do have a question also. How secure is it to allow people to upload items to my website server? I am concerned someone can do malicious things by trying to do this. I just think I'd get people to upload pictures more willingly if they could just do it from a page on my site, rather than go through the trouble of emailing the picture to me.

If someone could please give me step by step instructions and answer my question, I would be so appreciative. {no outsource requests allowed (asking for help w/o discussing money is fine) - thanks}

Thank you,

Jason

wilku

I think it would be hard (impossible?) to do without learning some programming. There are some galleries scripts ready, but even so you'll need to integrate those scripts with your site.
So three choices really:
- use a written gallery script (http://codex.gallery2.org/index.php/Gallery2:About this one for example) - it will still need some programming skills
- learn php and mysql and write your own (takes longer, but is more ambitious)
- hire someone who will do this for you (not by means of this site) if you don't have time or just don't want to do any of the previos two.

If you decide for the second one, start with some php&mysql tutorial. Then look for some php gallery tutorial

scrypte

jv1025 wrote:
I do have a question also. How secure is it to allow people to upload items to my website server? I am concerned someone can do malicious things by trying to do this. I just think I'd get people to upload pictures more willingly if they could just do it from a page on my site, rather than go through the trouble of emailing the picture to me.

A: I ususually set ownership of the directory by apache, so that I do not have to permit global permissions to the directory (requires root or administrator access). Make sure you are protecting from directory hijacking and recursive commands. If written improperly I could upload something with /etc/passwd if that was how it was store and print out every username and password on your server. So protect against XSS and other Common PHP Attacks. This site has some great tutorials, you should read them.

jv1025 wrote:
If someone could please give me step by step instructions and answer my question, I would be so appreciative. {no outsource requests allowed (asking for help w/o discussing money is fine) - thanks}

Answered Aboive

If you would like futher help please PM me, no compensation required. I enjoy helping new developers as I had a knowledgable programmer help me when I was learning.