INSERT::
if ($submit == 'Upload File') {
$write_dir = '/cgi-bin/';
exec ( "mv ".$input_file. " '".$write_dir.$input_file_name. "'");
printf ( "<p>\n");
printf ( "Your file %s was successfully uploaded.<br>\n",$input_file_name);
$file_name = $write_dir.$input_file_name;
$file_size = filesize ($file_name);
$fp = fopen ($file_name, 'r');
$data = addslashes (fread ($fp, $file_size));
fclose ($fp);
unlink ($file_name);
$chan=mysql_connect ($DBHost,$DBUser,$DBPass) or die ("Couldn't connect to server.");
$db=mysql_select_db ($DBName) or die ("Couldn't connect to db.");
$new_description = addslashes($description);
$new_input_file_name = addslashes($input_file_name);
$new_input_file_size = addslashes($input_file_size);
$new_input_file_type = addslashes($input_file_type);
$sql = ("UPDATE pics SET
description='$new_description',
filename='$new_input_file_name',
filesize='$new_input_file_size',
filetype='$new_input_file_type',
bin_data = '$data'
WHERE ItemID=$updateid");
$updatepiccy = mysql_query ($sql,$chan) or die ("Couldn't connect to pics.");
}
printf ( "<p>\n");
printf ( "<form action=\"%s\" method=\"POST\"
enctype=\"multipart/form-data\">\n", $PHP_SELF);
printf ( "<input type=\"hidden\" name=\"MAX_FILE_SIZE\"
value=\"65535\">\n");
printf ( "<input type=\"hidden\" name=\"description\"
Value=\"%s\"><br>\n", $PHP_AUTH_USER);
printf ( "Picture Filename: \n");
printf ( "<input type=\"file\" name=\"input_file\"><br>\n");
printf ( "<input type=\"hidden\" name=\"updateid\"
value=\"$II\"><br>\n");
printf ( "<input type=\"submit\" name=\"submit\" value=\"Upload File\">\n");
printf ( "</form>\n");
printf ( "<p>\n");
printf ( "</body>\n");
printf ( "\n");
RETREIVAL::
if($id){
$conn_id = mysql_connect ($DBHost,$DBUser,$DBPass) or die ("NO connect");
$DBN=mysql_select_db ($DBName) or die ("NO Name");
$query = "select * from pics where ItemID = $id";
$res_id = mysql_query ($query, $conn_id) or die ("no query");
if (! $res_id) {
printf ( "MySQL Error: (%d) %s<br><br>%s\n",
mysql_errno (),
mysql_error (),
$query);
mysql_close ($conn_id);
exit ();
}
$row = mysql_fetch_array ($res_id);
if ($row) {
$data = $row[ "bin_data"];
$type = $row[ "filetype"];
$filename = $row[ "filename"];
mysql_close ($conn_id);
Header ( "Content-disposition: filename=".$filename);
Header ( "Content-type: $type");
echo $data;
exit ();
}
else {
printf ( "There were no rows found with ItemID = %d\n", $id);
mysql_close ($conn_id);
}
}
DISPLAY=
<IMG SRC=RETRIEVAL.PHP?ID=xxx> xxx=ItemID
FIELDS NEEDED
filename
filetype
filesize
description <--not needed
bin_data <-----BLOB
ItemID
Assumes ItemID already exists as this routine is for updating a record, ie add the record then add the picture,
