Image Handling

am 13.10.2007 10:30:54 von Kye

Can anybody suggest to me a good tutorial on how to upload images in php and
have their location put into a MySQL database?

I know that this is really basic but so are my PHP skills at the moment.

TIA
Kye.

Re: Image Handling

am 13.10.2007 11:50:09 von henri

On Sat, 13 Oct 2007 08:30:54 +0000, Kye wrote:

> Can anybody suggest to me a good tutorial on how to upload images in php
> and have their location put into a MySQL database?
>
> I know that this is really basic but so are my PHP skills at the moment.
>
> TIA
> Kye.

some code to help figure the process out

include 'config.php'; // hold database name, location, user, pass etc

// we only upload jpg

$mimetypes = array("image/jpg", "image/jpeg", "image/jpe", "image/pjpeg");
$code = "";

// process post data

if (isset($_POST['filesubmitted'])) {

$tmp_name = $_FILES['file']['tmp_name'];

if (!is_uploaded_file($tmp_name))
$code = "filenotfounderror";

$file_size = $_FILES['file']['size'];

if ($file_size > $upload_file_size)
$code = "filesizeerror";

$mime_type = $_FILES['file']['type'];

if (!in_array($mime_type, $mimetypes))
$code = "filetypeerror";

} else
$code = "resubmit";

if ($code != "") {

// deal with error

session_start();
$_SESSION = array();
$_SESSION['formdata'] = $_POST;
header("Location: add.php?code=$code");

} else {

$document_root = $_SERVER['DOCUMENT_ROOT'];
$destination = $document_root . "/images/";

$file_name = $_FILES['file']['name'];

move_uploaded_file($tmp_name, $destination . $file_name);

if (is_file($destination . $file_name)) {
$oldumask = umask(0);
chmod($destination . $file_name, 0644);
umask($oldumask);
} else
die("Er... what the fuck happened?");

// insert new record in database

$file_name = $_FILES['file']['name'];

mysql_connect($db['host'], $db['user'], $db['password'])
or die (mysql_error());

mysql_select_db($db['name']) or die(mysql_error());

$query = "INSERT INTO $table (file_name) VALUES ('$file_name')";
$result = mysql_query($query);
if (!$result) {
$msg = 'Invalid query:' . mysql_error() . '
' . $query . '
';
die($msg);
}

mysql_close();

header("Location: done.php?");

}

Re: Image Handling

am 13.10.2007 14:04:58 von Courtney

Kye wrote:
> Can anybody suggest to me a good tutorial on how to upload images in php and
> have their location put into a MySQL database?
>
> I know that this is really basic but so are my PHP skills at the moment.
>
> TIA
> Kye.
>
>
>
Here are some snippets from code that actually works. I Actually shove
the files iN the database. Not references to them.

// Yawn bugger, Files. File data should be stored in the $_FILES[]
array, so let's start with the the new ones..
for ($i=0;$i<10;$i++)
{
$index="new_file".$i;
$filename= $_FILES[$index]["name"]; //orig filename
$filesize= $_FILES[$index]["size"]; // the size in bytes of the
uploaded file
$tmpname=$_FILES[$index]["tmp_name"]; // the name of the temporary
copy of the file stored on the server
$index="new_description".$i; // where new file decscriptors are stored
$filedescription=$_POST[$index];

if ($filename=="" || $filesize==0) // skip emptiness.
continue;
// one supposes one has a file at this point..massage the name
into just the filename without the slashes
$newname=$tmpname.$i;
copy($tmpname,$newname);
$filename=basename($filename);
$query=sprintf("insert into project_files set
project_id='%s',current='yes', date='%s' ,user='%d', size='%d',
description='%s', name='%s', content=LOAD_FILE('%s') ",
$project_id,
date('Y-m-d'),
$employee_id,
$filesize,
$filedescription,
$filename,
$newname);
mysql_query($query);
unlink($newname);
}
} // end if update..

Note the use of the copy command to sidestep a 'feature' of PHP5that it
doesn't in fact create aan actual disk file that Mysql can LOAD until it
exits, unless you COPY it.

The form section that allows te user to upload files is this..

// Ok lets put up 12 new file boxes for upload
?>Add new files:

for($i=0;$i<10;$i++)
{
?>

}
?>

Select file to upload	align="left">Enter Brief Description
name="new_file" >	name="new_description" maxlength="64" >

And to retrieve the file for download, I simply use a URL pointing at
this code, with the file ID as a get variable.

open_database(); // ready to check
// get file id..use GET rather than POST as there is adequate security
anyway
// and it makes clickable download URLS easier to generate.
// i.e. will work
// if you know the file iD in the database. And have permissions to
access the project it's in.
$file_id=$_GET['id'];
$login=getenv("REMOTE_USER");
// first check whether the user exists on the database. If they have
got this far this should never fail
// unless someone manually deletes a database entry or corrupts it.
$query="Select id, privilege_level from employees where login_name =
'".$login."'";
$result=mysql_query($query);
if(($result>0) && (($rows=mysql_numrows($result)) == 1)) //got some data
{
$employee_id=mysql_result($result,0,"id"); // id in employees table
$privilege=mysql_result($result,0,"privilege_level"); // and get their
privilege Power users can access any project
}
else abort_session(" this user is unkown - Access denied!\r\n");
if ($privilege < $privilege_level) // can access the file only if
employees.id matches project creator
{
$query="select employee from projects, project_files where
project_files.id='".$file_id."' and project_files.project_id=projects.id";
$result=mysql_query($query);
if(($result>0) && (($rows=mysql_numrows($result)) == 1)) //got some data
{
if($employee_id!=mysql_result($result,0,'employee')) // user doesn't
have access rights to this project
{
abort_session("you have insufficient privileges to access this
file!\r\n");
//which begs the question of how they got to start trying to
download it,. Hmm..bug elsewhere?
}
}

}
//ok we can access the file legally..how about actually?
$query="select name, content, size from project_files where
id='".$file_id."'";
$result=mysql_query($query);
if(($result>0) && (($rows=mysql_numrows($result)) == 1)) //got some data
{
$name=mysql_result($result,0,'name');
$content=mysql_result($result,0,'content');
$size=mysql_result($result,0,'size');
}
else abort_session ("the file ID you requested cannot be found\r\n"); //
no such file/project in the database
$mtype=get_mime($name);
//spit out standard header stuff
header("Pragma: public");

header("Expires: 0");

header("Cache-Control: must-revalidate, post-check=0, pre-check=0");

header("Cache-Control: public");

header("Content-Description: File Transfer");

header("Content-Type: ".$mtype);

header("Content-Disposition: attachment; filename=\"".$name."\"");

header("Content-Transfer-Encoding: binary");
print $content;
?>

Note that there are lots of calls to library stuff I have written but
you should be able to get the gist of what is going on.

In practice this is working very well. We use it to exchange working
documents with a database server. The code is npot elegant, but them I
am fairly new to PHP.

It does, however work.

Re: Image Handling

am 13.10.2007 15:23:35 von Hans-Peter Sauer

<2n%Pi.339$cR5.57@news-server.bigpond.net.au>

> Can anybody suggest to me a good tutorial on how to upload images in php and
> have their location put into a MySQL database?
>
> I know that this is really basic but so are my PHP skills at the moment.
>

www.phpimage.co.uk and have a look at 'upload' webpages .

Just tack on some php code onto the end of the routine to put the image
location into your database .

--
www.vhit.co.uk
www.jpgimage.co.uk
www.phpwhois.co.uk
www.cannabiswindow.co.uk