upload code works in firefox but doesnt work in ie

[saunders1989]

i can upload an image in firefox and i just tested it in ie and for some reason i just get the error saying the file is too large. but i think that is the error that is displayed if nothing gets uploaded. i am unsure why it doesnt work in ie any ideas would be helpful:

<?php

$max_size=2*1024*1024;

 // Check if a file has been uploaded
if(isset($_FILES['uploaded_file']) && preg_match("/image\/jpeg|image\/jpg/i",$_FILES['uploaded_file']['type']) && $_FILES['uploaded_file']['size']<= $max_size)
{
     // Make sure the file was sent without errors
     if($_FILES['uploaded_file']['error'] == 0)
    {
      $target_path = "images/";
      $target_path = $target_path . basename( $_FILES['uploaded_file']['name']);    

  if(!file_exists($target_path)){

   if(move_uploaded_file($_FILES['uploaded_file']['tmp_name'], $target_path))
      {

     // --- IMPORTANT --- //
                    $image = $target_path;
                    $maxHeight = 100; $maxWidth = 90;
                    include 'thumbnail_function.php'; // Include the function file
                    thumbnail($image, $maxWidth, $maxHeight); // Call the function with a width of 90...
                    $maxWidth = 500; $maxHeight = 400; // Redefine the size.
					include 'view_function.php';
                    viewed($image, $maxWidth, $maxHeight); // Call the function again with a width of 350...
                    // --- IMPORTANT --- //

      echo "The file ".  basename($_FILES['uploaded_file']['name']). " has been uploaded";

     $dbLink = new mysqli('host', 'database', 'username', 'password');
        if(mysqli_connect_errno()) {
        die("MySQL connection failed: ". mysqli_connect_error());
                             }          

         // Gather all required data
         $name = $dbLink->real_escape_string($_FILES['uploaded_file']['name']);
         $mime = $dbLink->real_escape_string($_FILES['uploaded_file']['type']);
         $size = intval($_FILES['uploaded_file']['size']);
         $image_path = $dbLink->real_escape_string($target_path);
       	 $gallery_type = $dbLink->real_escape_string($_POST['gallery_type']);
         $desc = $dbLink->real_escape_string($_POST['description']);
         $image_path = $dbLink->real_escape_string($target_path);
		 $thumb_path = $dbLink->real_escape_string($tmb_name);
		 $viewed_path = $dbLink->real_escape_string($viewed);

      //query to insert the data i had gathered into the database
   $query = "INSERT INTO `images` (`name`, `size`, `created`, `image_path`, `gallery_type_id`, `description`, `thumbnail_path`, `viewed_path`)
             VALUES ('{$name}', {$size}, NOW(), '{$image_path}', '{$gallery_type}', '{$desc}', '{$tmb_name}', '{$viewed}')";

      //executes the query
      $dbLink->query($query);
  }
   }

   else 
       {
		   echo '<h1>Error</h1>';
           echo 'A file with the same name exists please change the file name and try again';
       }
}

  else
        {
			echo '<h1>Error</h1>';
     		echo 'A file was not sent to the database';
      	}
}

else
        {
			echo '<h1>Error</h1>';
     		echo 'The file is too large. Please upload an image no larger than 2mb';
     	}

 // Echo a link back to the main page
 echo '<p>Click <a href="member-index.php">here</a> to go back</p>'; 
 ?>

thanks for reading

[gazzab]

Good day,

Could you please post the corresponding form for this please

[saunders1989]

 <form action="add_file.php" method="post" enctype="multipart/form-data">
 		 <input type="hidden" name="MAX_FILE_SIZE" value="5242880" />
         <div id="addfile">
         <input type="file" name="uploaded_file" /><br />
         </div>

     <div id="dropdown">
	 <select name="gallery_type" id="gallery_type">
    	<option>Please Select an Album
		<?php
			for($i = 1; $i < $num_results+1; $i++) {
			echo "<option value=\"" . $galleryTypes[$i]['gallery_type_id'] . "\">";
			echo $galleryTypes[$i]['gallery_type_desc'];
			echo "</option>\n";
			}
		?>
        </option>
	</select>
    </div>

	<div id="desc">
    <textarea name="description" cols="40" rows="5" onkeyup="textLimit(this,3000);"> </textarea>
    </div>

     <div id="upload">
       <input type="submit" value="Upload" />
     </div> 


</form>

[gazzab]

Your form is wrong.

The input type for the max size. You need to call your max size variable. Also you have called the input name max_file_size when your variable is just max_size. Would be a good idea to to change this.

This is what you need to do:

Change

<input type="hidden" name="MAX_FILE_SIZE" value="5242880" />

to

<input type="hidden" name="MAX_SIZE" value="<?php $MAX_SIZE; ?>"/>

[saunders1989]

unfortunatly that didnt work. any other ideas?

[igorek]

your db is exposed ><!

[saunders1989]

is that the reason why it is not working in ie?

[Weedpacket]

No, but it means anyone reading this page would be able to log in to your database.
Or at least, they would have if I hadn't changed the connection details in the code you posted 🙂

[djjjozsi]

You should read how internet explorer sets the mime type for images.
Then add these new rules for your regular expression.
"/image\/jpeg|image\/jpg/i"

pjpeg is missing.
To get the proper value, print the $_FILES array.

<pre><?php print_r($_FILES) ?></pre>

Checking the mime type is not a 100% way to make sure the file type, because the browser sends it, and you have to notice that it would be fake!