Add as Session

[herghost]

Hi all,

 

When the below code runs, how can I store the result (image) as a session?

 

<?php
session_start();

include('include/database.php');


// Make sure the user actually 
// selected and uploaded a file
if (isset($_FILES['image']) && $_FILES['image']['size'] > 0) { 

      // Temporary file name stored on the server
      $tmpName  = $_FILES['image']['tmp_name'];  
       $userid = $_SESSION['SESS_USERID'];
      // Read the file 
      $fp      = fopen($tmpName, 'r');
      $data = fread($fp, filesize($tmpName));
      $data = addslashes($data);
      fclose($fp);
      

      // Create the query and insert
      // into our database.
  
  $sql = mysql_query("SELECT * FROM bandpic WHERE userid = '$userid'");
if(mysql_num_rows($sql) == 0)
{
      $query = "INSERT INTO bandpic
   (userid, image)
   values
   ('$userid','$data')";
   
}
else
$query = "UPDATE bandpic SET 
userid = '$userid',
image = '$data'";

}
   
     $result = mysql_query($query);
 session_regenerate_id();
		$bandpic = mysql_fetch_assoc($result);
    $_SESSION["BANDPIC"] = $bandpic['image'];
session_write_close();

   //Check whether the query was successful or not
   if($result) {
      header("location: member_home.php");
      exit();
   }else {
      die(mysql_error());
      
   }
   


// Close our MySQL Link
mysql_close($con);
?>  

[Goldeneye]

You have to use a SELECT query to pull the image  out of the database. Either that, or use the variable $data as opposed $bandpic['image']. $bandpic is null because the query you assigned it to is not retrieving information, it's inserting information. (Hopefully that's clear.)

[herghost]

I think so, basically I can not store it as a session as its a file and not a string?

[xtopolis]

What are you trying to accomplish..?

 

It looks like you upload the file... open the temp version of it.. read it.. add slashes to it (why?)  Then you store the data in mysql.  Why do you need it in a session?

[Goldeneye]

<?php
session_start();

include('include/database.php');


// Make sure the user actually 
// selected and uploaded a file
if (isset($_FILES['image']) && $_FILES['image']['size'] > 0) { 

      // Temporary file name stored on the server
      $tmpName  = $_FILES['image']['tmp_name'];  
       $userid = $_SESSION['SESS_USERID'];
      // Read the file 
      $fp      = fopen($tmpName, 'r');
      $data = fread($fp, filesize($tmpName));
      fclose($fp);

      // Create the query and insert
      // into our database.

     $sql = mysql_query("SELECT * FROM bandpic WHERE userid = '$userid'");
if(mysql_num_rows($sql) == 0)
{
      $query = "INSERT INTO bandpic
   (userid, image)
   values
   ('$userid','$data')";
   
}
else
$query = "UPDATE bandpic SET 
userid = '$userid',
image = '$data'";

}

   //Check whether the query was successful or not
   if($result) {
      session_regenerate_id();
      $_SESSION["BANDPIC"] = $data;
      session_write_close();

      header("location: member_home.php");
      exit();
   }else {
      die(mysql_error());
      
   }
   


// Close our MySQL Link
mysql_close($con);
?> 

 

Try this and see if it works. Also, as xtopolis implied, there's no conceivable reason to pass your image through the addslashes() function.