multiple file upload not inserting into database.

[liamloveslearning]

Hi all,

 

Im currently working on a multiple file upload form, My form uploads all the pictures to the correct directory only it isnt inserting anything into my DB, I have my insert function and from reading and reading it SHOULD work, only it doesnt  , If anybody gets 5 mins could you see if you notice any bugs in my code?

Thanks in advance...

 

<?php
/*php uplosd start*/
if (isset($_POST['MM_insert'])) {
$upload_error_codes=array("",
	"The uploaded file exceeds the upload_max_filesize directive in php.ini.","",
	"The uploaded file was only partially uploaded.",
	"No file was uploaded.","Missing a temporary folder.",
	"Failed to write file to disk.","File upload stopped by extension.");
$allowed_ext_string="jpg,jpeg,png,tiff,bmp";
$allowed_extensions=explode(",",$allowed_ext_string);
$upload_status = "";
$allowed_size =  6+0;
$success_page = "model-account.php";
$thumbs_dir = "";
$resize_image = "";
$resize_width = +0;
$resize_height = +0;
$thumb_width = +0;
$thumb_height = +0;		
$make_thumbs = "";
$thumb_prefix = "";
$thumb_suffix = "";
$file_prefix = "";
$file_suffix = "";
$append_date_stamp = "";
$date_stamp=($append_date_stamp=="1")?date(time()):"";
$haulted = false;
$upload_folder="model_pictures/";
//Check for restrictions
//Check if upload folder exists
if(!file_exists($upload_folder)){die("Upload folder doesn't exist");}
if(!is_writable($upload_folder)){die("Upload folder is not writable");}
if($make_thumbs == "yes" && !file_exists($thumbs_dir)){die("Thumbnails folder doesn't exist");}
if($make_thumbs == "yes" && !is_writable($thumbs_dir)){die("Thumbnails folder is not writable");}
foreach($_FILES as $files => $_file){
	//Check if it's not empty
	if($_file['name']!=""){
		$pathinfo = pathinfo($_file['name']);
		//If allowed extension or no extension restriction
		if(!in_array(strtolower($pathinfo['extension']),$allowed_extensions) && $allowed_ext_string!=""){
			die(strtoupper($pathinfo['extension'])." files are not allowed.
			<br>No files have been uploaded.");
		}
		if($_file['size']>$allowed_size*1048576 && $allowed_size!=0){
			die("The file size of ".basename($_file['name'])." is ".round($_file['size']/1048576,2)."MB,
			which is larger than allowed ".$allowed_size."MB.<br>No files have been uploaded.");
		}		
	}
}
//attempt to upload
foreach($_FILES as $files => $_file){
	//Check if it's not empty
	if($_file['name']!=""){
		$pathinfo = pathinfo($_file['name']);
		$file_name_array = explode(".", basename($_file['name']));
		$filename = $file_name_array[count($file_name_array)-2];
		$target = $upload_folder;
		$file_uploaded = false;
		$target = $target."/".$file_prefix.$filename.$file_suffix.$date_stamp.".".$pathinfo['extension'];
		//if image
		if(strtolower($pathinfo['extension'])=="jpeg" || strtolower($pathinfo['extension'])=="jpg"){
			//if needs resizing or a thumbnail
			if(($resize_image == "yes" && ($resize_width!="" || $resize_height!="")) || ($make_thumbs == "yes" && ($thumb_width!="" || $thumb_height!=""))){
				$src = imagecreatefromjpeg($_file['tmp_name']);
				list($width,$height)=getimagesize($_file['tmp_name']);
				//if needs thumbnail
				if ($make_thumbs == "yes" && ($thumb_width!="" || $thumb_height!="")){
					$thumb_newwidth=($thumb_width!=0)?$thumb_width:(($width/$height)*$thumb_height);
					$thumb_newheight=($thumb_height!=0)?$thumb_height:(($height/$width)*$thumb_width);
					$tmp=imagecreatetruecolor($thumb_newwidth,$thumb_newheight);
					imagecopyresampled($tmp,$src,0,0,0,0,$thumb_newwidth,$thumb_newheight,$width,$height);
					$thumb_name=$thumb_prefix.$filename.$thumb_suffix.$date_stamp.".".$pathinfo['extension'];
					if(imagejpeg($tmp,$thumbs_dir."/".$thumb_name,100)){
						$upload_status=$upload_status."Thumbnail for ".basename($_file['name'])." was created successfully.<br>";
					}else{
						die($upload_status."There was a problem creating a thumbnail for ". basename($_file['name']).".
						Upload was interrupted.<br>");
					}
				}
				//if needs resizing
				if($resize_image == "yes" && ($resize_width!="" || $resize_height!="")){
					$newwidth=($resize_width!=0)?$resize_width:(($width/$height)*$resize_height);
					$newheight=($resize_height!=0)?$resize_height:(($height/$width)*$resize_width);
					$tmp=imagecreatetruecolor($newwidth,$newheight);
					imagecopyresampled($tmp,$src,0,0,0,0,$newwidth,$newheight,$width,$height); 
					if(imagejpeg($tmp,$target,100)){
						$upload_status=$upload_status.basename($_file['name'])." was successfully resized.<br>";
						$file_uploaded=true;
					}else{
						die($upload_status.basename($_file['name'])." could not be resized. Upload was interrupted.<br>");
					}
				}
			}
		}
		if(!$file_uploaded){
			if(move_uploaded_file($_file['tmp_name'], $target)){
				$upload_status=$upload_status.basename($_file['name'])." was uploaded successfully.<br>";
			}else{
				$haulted=true;
			}
		}
		//Cleanup
		if(isset($src)){imagedestroy($src);unset($src);}
		if(isset($tmp)){imagedestroy($tmp);unset($tmp);}
		if($haulted){die($upload_status."There was a problem uploading ". basename($_file['name']).".
					Error: ".$upload_error_codes[basename($_file['error'])].". Upload was interrupted.<br>");}
	}
}
if($success_page!="" && $upload_status!=""){
	header("Location: ".$success_page);
}
}

// Load the tNG classes
require_once('includes/tng/tNG.inc.php');

// Make unified connection variable
$conn_saucy_connection = new KT_connection($saucy_connection, $database_saucy_connection);

//Start Restrict Access To Page
$restrict = new tNG_RestrictAccess($conn_saucy_connection, "");
//Grand Levels: Level
$restrict->addLevel("1");
$restrict->Execute();
//End Restrict Access To Page

if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  if (PHP_VERSION < 6) {
    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
  }

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

foreach($_FILES as $files => $_file){
$_POST[$files]="";
if($_file['name']!=""){
$pathinfo=pathinfo($_file['name']);
$file_name_array = explode(".", basename($_file['name']));
$filename = $file_name_array[count($file_name_array)-2];
$_POST[$files]=$file_prefix.$filename.$file_suffix.$date_stamp.".".$pathinfo['extension']; 

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "mulup")) {
  $insertSQL = sprintf("INSERT INTO model_pictures (user_id, user_picture) VALUES (%s, %s)",
                       GetSQLValueString($_POST['userid'], "text"),
                       GetSQLValueString($_POST['field_name1'], "text"));

  mysql_select_db($database_saucy_connection, $saucy_connection);
  $Result1 = mysql_query($insertSQL, $saucy_connection) or die(mysql_error());
}

}
}

?>
<?php require_once('Connections/saucy_connection.php'); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Untitled Document</title>
</head>

<body>

<form method="POST" action="<?php echo $editFormAction; ?>" name="mulup" id="mulup" enctype="multipart/form-data">
<input type="file" name="field_name1"><br />
<input type="file" name="field_name2"><br />
<input type="file" name="field_name3"><br />
<input type="hidden" name="userid" value="<?php echo $_SESSION['kt_login_id']; ?>" />
<input type="submit" name="MM_insert" value="upload"/><br />
</form>

</body>
</html>

[liamloveslearning]

Ive managed to insert my data into the DB now only its not looping all the filenames and just inserting the first one, my insert/loop is

 

foreach($_FILES as $files => $_file){
$_POST[$files]="";
if($_file['name']!=""){
$pathinfo=pathinfo($_file['name']);
$file_name_array = explode(".", basename($_file['name']));
$filename = $file_name_array[count($file_name_array)-2];
$_POST[$files]=$file_prefix.$filename.$file_suffix.$date_stamp.".".$pathinfo['extension']; 

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form")) {
  $insertSQL = sprintf("INSERT INTO model_pictures (user_id, user_picture) VALUES (%s, %s)",
                       GetSQLValueString($_POST['user'], "text"),
                       GetSQLValueString($_POST['upl'], "text"));

  mysql_select_db($database_saucy_connection, $saucy_connection);
  $Result1 = mysql_query($insertSQL, $saucy_connection) or die(mysql_error());
}

}
}

 

upl is the name of 1 field only but I thought it wouldnt matter with it being a looper region?

[liamloveslearning]

is there a way I can post multiple file names?

 

eg

GetSQLValueString($_POST['upl' . 'upl2' . 'upl3'], "text"));

[liamloveslearning]

Has anybody any ideas? Im about to rip my hair out