Need help with combining php files

[The_Dude_1978]

Hi there,

 

I'm a beginner at php and mysql. I know a few basics, but i'm stuck. I'm trying to make something for my wifes company that will be as simple as i can make it.

The files i have:

login/register script (register.php / regcheck.php)

member / profile script

and a image upload script. (upload.php: which is now in register.php and process.php)

What i want to do is:

at register i've added a file upload form, but the reg.php points to regcheck.php

and the upload.php points to process.php

I want to combine those 2 files: regcheck.php and process.php to one file. Now i've been breakin my head over this for 2 day's and i cant find a solution and i'm not that experienced.

 

 

what i've done so far is the following, but it does'nt fill my database:

 

databas.sql:

CREATE TABLE `klanten` (

  `id` int(4) unsigned NOT NULL auto_increment,

  `username` varchar(32) NOT NULL,

  `password` varchar(32) NOT NULL,

  `level` int(4) default '1',

  `filename` varchar(255) not null,

  `mime_type` varchar(255) not null,

  `file_size` int          not null,

  `file_data` mediumblob    not null,

 

  primary key (image_id),

  index (filename)

) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

 

<?php
ob_start();

function assertValidUpload($code)
    {
        if ($code == UPLOAD_ERR_OK) {
            return;
        }

        switch ($code) {
            case UPLOAD_ERR_INI_SIZE:
            case UPLOAD_ERR_FORM_SIZE:
                $msg = 'Image is too large';
                break;

            case UPLOAD_ERR_PARTIAL:
                $msg = 'Image was only partially uploaded';
                break;

            case UPLOAD_ERR_NO_FILE:
                $msg = 'No image was uploaded';
                break;

            case UPLOAD_ERR_NO_TMP_DIR:
                $msg = 'Upload folder not found';
                break;

            case UPLOAD_ERR_CANT_WRITE:
                $msg = 'Unable to write uploaded file';
                break;

            case UPLOAD_ERR_EXTENSION:
                $msg = 'Upload failed due to extension';
                break;

            default:
                $msg = 'Unknown error';
        }

        throw new Exception($msg);
    }

$errors = array();

    try {
        if (!array_key_exists('image', $_FILES)) {
            throw new Exception('Image not found in uploaded data');
        }

        $image = $_FILES['image'];

        // ensure the file was successfully uploaded
        assertValidUpload($image['error']);

        if (!is_uploaded_file($image['tmp_name'])) {
            throw new Exception('File is not an uploaded file');
        }

        $info = getImageSize($image['tmp_name']);

        if (!$info) {
            throw new Exception('File is not an image');
        }
    }
    catch (Exception $ex) {
        $errors[] = $ex->getMessage();
    }


if(
    isset( $_POST['user'] ) &&
    isset( $_POST['pass'] ) 
)
{
    if( strlen( $_POST['user'] ) < 4 )
    {
        echo "Username Must Be More Than 4 Characters.";
    }
    elseif( strlen( $_POST['pass'] ) < 4 )
    {
        echo "Passwrod Must Be More Than 4 Characters.";
    }
    elseif( $_POST['pass'] == $_POST['user'] )
    {
        echo"Username And Password Can Not Be The Same.";
    }
    else
    {
        	
	include( 'database.php' );

        $username = mysql_real_escape_string( $_POST['user'] );
        $password = md5( $_POST['pass'] );
	$filename = mysql_real_escape_string($image['name']);
        $mime_type = mysql_real_escape_string($info['mime']);
        $file_size = $image['size'];
        $file_data = mysql_real_escape_string(file_get_contents($image['tmp_name'])

        $sqlCheckForDuplicate = "SELECT username FROM klanten WHERE username = '". $username ."'";

        if (count($errors) == 0) {
        // no errors, so insert the image

        if( mysql_num_rows( mysql_query( $sqlCheckForDuplicate ) ) == 0 )
        {
            $sqlRegUser =     "INSERT INTO
                        klanten( username, password, filename, mime_type, file_size, file_data )
                    VALUES(
                        '". $username ."',
                        '". $password ."',
					'". $filename ."',
					'". $mime_type ."',
					'". $file_size ."',
					'". $file_data ."',
                        )";

            if( !mysql_query( $sqlRegUser ) )
            {
                echo "You Could Not Register Because Of An Unexpected Error.";
            }
            else
            {
                echo "You Are Registered And Can Now Login";
                $formUsername = $username;
                
              	header('Location: view.php?id=' . $id);
       
            }
        }
        else
        {
            echo "The Username You Have Chosen Is Already Being Used By Another User. Please Try Another One.";
            $formUsername = $username;
        }
    }
}
else
{
    echo "You Could Not Be Registered Because Of Missing Data.";
}
ob_end_clean();
?>
<html>
    <head>
        <title>Error</title>
    </head>
    <body>
        <div>
            <p>
                The following errors occurred:
            </p>

            <ul>
                <?php foreach ($errors as $error) { ?>
                    <li>
                        <?php echo htmlSpecialChars($error) ?>
                    </li>
                <?php } ?>
            </ul>

            <p>
                <a href="upload.php">Try again</a>
            </p>
        </div>
    </body>
</html>

 

I guess i've mixed up things pretty badly right?

 

[attachment deleted by admin]