PHP SUBMISSION FORM WITH ATTACHMENT

[MEOWMEOWMEOW]

Howdy - I'm having issues uploading files through a submission form in PHP. Below is my code. I specifically marked the lines I believe are causing the problems, as I am getting the follow errors:

Notice: Array to string conversion and
Warning: move_uploaded_file() expects parameter 1 to be string, array given

Any help would be much appreciated!

<?php

if(isset($_POST['submit']))
{

$name = $_POST['name'];

$email = $_POST['email'];

$phone = $_POST['phone'];

$facebook = $_POST['facebook'];

$linkedin = $_POST['linkedin'];

$twitter = $_POST['twitter'];

$yourStory = $_POST['yourStory'];

$file = $_FILES['file']['name'];

$file_loc = $_FILES['file']['tmp_name'];

$file_size = $_FILES['file']['size'];

$file_type = $_FILES['file']['type'];

$folder="uploads/";

move_uploaded_file($file_loc, $folder.$file); //ISSUE HERE

$connection = mysqli_connect('localhost','root','','cms');

$query = "INSERT INTO report(name, email, phone, facebook, linkedin, twitter, yourstory, file, type, size)";
$query .= "VALUES ('$name','$email','$phone','$facebook','$linkedin','$twitter','$yourStory','$file','$file_type','$file_size')";//ANOTHER ISSUE HERE

mysqli_query($connection, $query);
}
?>

[Bonesnap]

Please use the [noparse]

...

[/noparse] forum tags to post your PHP code so it is easier for others to read and debug.

The message "Warning: move_uploaded_file() expects parameter 1 to be string, array given" is pretty clear: It's expecting a string but you have given it an array. $file_loc is an array and not a string. Which means $FILES['file']['tmp_name'] is also an array. Try doing a var_dump() on $FILES or $_FILES['file']['tmp_name'] to see what it contains and you should be able to figure it out from there.

Three other things about your script:

1) You aren't checking at all if your $_POST variables exist or not. What happens if they're all empty? What happens if the user doesn't upload any files, either?

2) You aren't doing any prevention for SQL injection on your query, leaving you vulnerable. Consider using prepared statements or at least mysqli_real_escape_string() on your variables before putting them into your query.

3) You aren't checking the result of the SQL query. What if there's an error?

PS: Love the user name. 🙂

[MEOWMEOWMEOW]

Thanks for your response. I'm new to php so I'm taking it inch by inch. I understand the difference between a string and an array, however, I have been unable to alter the code to make it work! Do you have any tips? I haven't been able to find useful information on forms that contain uploaded files as well as data input.

[Weedpacket]

[font=monospace]$_FILES['file']['tmp_name'][/font] would be an array if you had named the form field to be an array (with square brackets, like [font=monospace]name="file[]"[/font]. What is the name you used for the form field?

[MEOWMEOWMEOW]

it's named $file_loc = $_FILES['file']['tmp_name']

[Bonesnap]

Can you post the HTML code for your form?

[Weedpacket]

MEOWMEOWMEOW;11051685 wrote:

it's named $file_loc = $_FILES['file']['tmp_name']

No, I mean the form field in your HTML form. [font=monospace]<input type="file" name="???">[/font]

[MEOWMEOWMEOW]

<div id="modal" class="container text-right">
                <div class="call-to-action">

                <a href="#myModal" role="button" data-toggle="modal" class="btn btn-default btn-xl wow tada">Upload</a>

            <div class="modal fade" id="myModal">
                <div class="modal-dialog">
                    <div class="modal-content text-center">
                        <div class="modal-header ">
                            <button class="close" data-dismiss="modal">&times;</button>

                            <h4 class="modal-title">Enter Information</h4>
                        </div><!-- end modal-header -->

                <div class="modal-body">
                    <h4></h4>

                    <p><small class="text-muted text-align">Tell us </small></p>


                    <form id="letsgetit" action="me.php" method="post" class="form-horizontal text-left" enctype="multipart/form-data">
                        <div class="form-group">
                            <label class="col-lg-2 control-label" name="name" >Name</label>
                                <div class="col-lg-10">
                                    <input class="form-control" name="name" placeholder="Name" type="text">
                                </div>
                        </div>

                            <div class="form-group">
                                <label class="col-lg-2 control-label" name="email">Email Address</label>
                                    <div class="col-lg-10">
                                        <input class="form-control" name="email" placeholder="Email Address" type="email">
                                    </div>
                            </div>

                            <div class="form-group">
                                <label class="col-lg-2 control-label" name="phone" >Cell Phone #</label>
                                    <div class="col-lg-10">
                                        <input class="form-control" name="phone" placeholder="Cell Phone #" type="number">
                                    </div>
                            </div>

                            <div class="form-group">
                                <label class="col-lg-2 control-label" name="facebook" >Facebook URL</label>
                                    <div class="col-lg-10">
                                        <input class="form-control" name="facebook" placeholder="Facebook URL" type="url">
                                    </div>
                                </div>

                            <div class="form-group">
                                <label class="col-lg-2 control-label" name="linkedin" >Linkedin URL</label>
                                    <div class="col-lg-10">
                                        <input class="form-control" name="linkedin" placeholder="Linkedin URL" type="url">
                                    </div>
                            </div>

                            <div class="form-group">
                                <label class="col-lg-2 control-label" name="twitter" >Twitter URL</label>
                                    <div class="col-lg-10">
                                        <input class="form-control" name="twitter" placeholder="Twitter URL" type="url">
                                    </div>
                            </div>

                                <div class="form-group" method="post">
                                    <label class="col-lg-2 control-label" name="yourStory">Your Tell All</label>
                                        <div class="col-lg-10">
                                        <textarea class="form-control" name="yourStory" placeholder="Tell us your story" rows="3"></textarea>

                                        </div>

                                 <div class="form-group">
                                    <label class="col-lg-2" for="inputFile">File input</label>

                                    <input method="post" name="file" type="file" id="file" value="upload"> 
                                    <p class="help-block">Upload relevant documents</p>

                                </div>

                                <br>

                                <div class="form-group">

                                    <div class="col-lg-10">
                                    <button name="submit" class="btn btn-success active" type="submit">Submit</button>
                                    </div>
                                </div>

                    </form>
                    <center> By submitting, you agree to our <a href="/terms">Terms and Conditions</a></center>
                </div><!-- end modal-body -->

                <div class="modal-footer">
                    <button class="btn btn-default" data-dismiss="modal" type="button">Close</button> <button class="btn btn-primary" type="button">Save changes</button>
                </div><!-- end modal-footer -->
            </div><!-- end modal-content -->
        </div><!-- end modal-dialog -->
    </div><!-- end myModal -->

        <!-- Collect the nav links, forms, and other content for toggling -->
        <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1">
            <ul class="nav navbar-nav navbar-right">
        </div>
        <!-- /.navbar-collapse -->
    </div>
    <!-- /.container-fluid -->