Hi guys,
I need your help. I am using two scripts as one are using for to hotlink the images that I have stored in mysql and the other script i am using for to get access to images.php. The two scripts I am using is link.php and images.php. I have got a problem with the images as I am trying to extact them when I enter the url something like www.mysite.com/link.php?user=test. I can't be able to extact the images when I get access to images.php and input the images in my php page. The image data have displayed as empty array.
here's the screenshot:
Link.php
<?php
session_start();
define('DB_HOST', 'localhost');
define('DB_USER', 'root');
define('DB_PASSWORD', '');
define('DB_DATABASE', 'hf');
$errmsg_arr = array();
$errflag = false;
$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
if(!$link) {
die('Failed to connect to server: ' . mysql_error());
}
$db = mysql_select_db(DB_DATABASE);
if(!$db) {
die("Unable to select database");
}
function clean($var)
{
return mysql_real_escape_string(strip_tags($var));
}
$username = clean($_GET['user']);
$pass = clean($_GET['pass']);
if($errflag) {
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
echo implode('<br />', $errmsg_arr);
} else {
$insert = array();
if(isset($_GET['user'])) {
$insert[] = 'username = \'' . clean($_GET['user']) .'\'';
}
if(isset($_GET['pass'])) {
$insert[] = 'pass = \'' . clean($_GET['pass']) . '\'';
}
if (count($insert)>0) {
$names = implode(',',$insert);
if($username) {
$sql = 'SELECT `id` FROM `images_list` WHERE `username` = "'.$username.'"';
$result1 = mysql_query($sql) or die('Error:<br />'. $sql .'<br />' . mysql_error());
$res = mysql_fetch_assoc($result1);
foreach($res as $row) {
echo '<p id="images"><img src="images.php?id='. $row['id'] .'" /></p>';
}
}
}
}
Images.php
<?php
session_start();
define('DB_HOST', 'localhost');
define('DB_USER', 'mydbusername');
define('DB_PASSWORD', 'mydbpassword');
define('DB_DATABASE', 'mydbname');
$id = (int)$_GET['id'];
$errmsg_arr = array();
$errflag = false;
$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
if(!$link) {
die('Failed to connect to server: ' . mysql_error());
}
$db = mysql_select_db(DB_DATABASE);
if(!$db) {
die("Unable to select database");
}
function clean($var)
{
return mysql_real_escape_string(strip_tags($var));
}
$sql = 'SELECT `images` FROM `Images_list` WHERE `id` = "'. $id .'"';
$result1 = mysql_query($sql) or die('Error:<br />'. $sql .'<br />' . mysql_error());
$res = mysql_fetch_assoc($result1);
foreach($res as $row) {
var_dump($row['images']);
exit;
$details = getimagesize($row['images']);
header ('Content-Type: ' . image_type_to_mime_type($details[2]));
echo file_get_contents($row['images']);
}
?>
any idea how to fix this?
