uploadig images to a database using a Form

shadiadi

hi i am having problems uploading images to my database via a Form the column it is uploaded to is set as a longblob. it does't upload aythig except the path to the image???



<table width="480" cellspacing="1" cellpadding="0" border="0" class="formtext">
<form name="form2" method="post" action="subcom.php" enctype="multipart/form-data" onsubmit="return v.exec()">
<tr>
<td align="right" width="150" id="t_logo">
&nbsp;<font color="red">*</font>Logo:
</td>
<td align="left" width="330">
<input type="file" name="vcLogo" />
</td>
</tr>
<tr>
<td colspan="2" align="center"><br />
<input name="submit" type="submit" class="button" value="Preview Your Company" />

</td>
</tr>
<tr>
<td colspan="2" align="center">
<input class="button" type="reset" name="reset" value="Reset Message" />
</td>
</tr>

</form>
</table>

I have missed out most of input fields i the form to maske it shorter.

Here is my submit code which writes everything to the database except for the image.



<? 
session_start();
error_reporting(sq);
?>
<?PHP
	include("global/connection.php");
	error_reporting(7);

{		

$insertsql ="insert into tblcompanydetails (vcCompanyName,vcStreetNo,vcStreet,vcCity,vcState,vcPostalCode,vcCountry,vcPhone,vcFaxNo,vcEmail,vcWebsite,vcTaxNo,vcRegNo,vcLogo,dtCreatedOn) values ('".addslashes($vcCompanyName)."','".addslashes($vcStreetNo)."','".addslashes($vcStreet)."','".addslashes($vcCity)."','".addslashes($vcState)."','".addslashes($vcPostalCode)."','".addslashes($vcCountry)."','".addslashes($vcPhone)."','".addslashes($vcFaxNo)."','".addslashes($vcEmail)."','".addslashes($vcWebsite)."','".addslashes($vcTaxNo)."','".addslashes($vcRegNo)."','".addslashes($vcLogo)["images"]["name"]."','".date("Y-m-d h:m:s")."')";

	$DB_site->query($insertsql);
	header("Location:index.php");
	exit;

}

?>
	<script>
		alert("Profile UPdated")
		document.location.href="index.php"
	</script>

bradgrafelman

I have a hard time believing that it INSERT's any data period, since the code you posted doesn't even parse; this code doesn't make sense:
```
addslashes($vcLogo)["images"]["name"]
```
Don't use [man]addslashes/man when preparing data for a MySQL query; instead, you should be using a database-specific function such as [man]mysql_real_escape_string/man (which does a lot more than addslashes() does).
It will only store the name of the image because that's all you told it to - you passed the variable that (presumably) holds the image name (e.g. $_FILES['vclogo']['name']). Instead, you should be passing the entire file data in the query. Try retrieving the contents of the image, e.g. with a function such as [man]file_get_contents[/man].
Where are all of these $vc* variables defined?
Where, specifically, is $vcLogo being defined, since it doesn't even follow the format of the $_FILES superglobal array?