Uploading image in database

Question

I had a problem while i was writing a short PHP code: I have this code in which i sent to a databse any string, and on the same page it echo any string. I tried to insert an image but i didn't sucedeed in, can sombedy of you solve this problem? Here's the code:

<form action="" method="POST">
<input type="text" name="namef" class="namef" placeholder="scrivi il tuo      nome"><BR></BR>
<textarea name="data" class="rounded" placeholder="Condividi il tuo     pensiero con il mondo."></textarea><BR></BR>
<input type="submit" value="Pubblica!" name="invia">
<input type="file" name="uph">
</form>

<?php
if($_POST['data']){
$nome=$_POST['namef'];
$data=$_POST['data'];
$ph=$_FILES['uph'];
$conn=mysql_connect('localhost', 'root', '') or die(mysql_error());
mysql_select_db('post', $conn);
mysql_query("INSERT INTO post (name, post, photo) VALUES ('$nome',   '$data', '$ph') ") or die(mysql_error());
}
?>

<div class="mann"><?php
$conn=mysql_connect('localhost', 'root', '') or die();
mysql_select_db("post", $conn);
$result= mysql_query("SELECT * FROM post") or die();
while($row= mysql_fetch_array($result)){
echo $row["name"]. " ha pubblicato un nuovo commento:". "</br>".       $row["post"]. "</br". $row["photo"]. "</br>". "</br>". "</br>";
}
?></div>

`
` won't send a `file` (see https://stackoverflow.com/questions/4526273/what-does-enctype-multipart-form-data-mean). You also are open to SQL injections and are using an insecure driver. Please use `mysqli` or `pdo` and parameterize your query. — chris85, Nov 19 '17 at 14:52
To send a file you need to include the `enctype` for the form - specifically `enctype='multipart/form-data'`. The data available in `$_FILES['uph']` would be an array so you cannot simply try to insert `$_FILES['uph']` in the database like that — Professor Abronsius, Nov 19 '17 at 15:00

score 0 · Answer 1 · answered Nov 19 '17 at 15:19

First I find the type of image by 'type' if that does not work then by 'mime' and if that does not work I create a new image treating the uploaded file as gif, png, and jpg and check which conversion worked.

Before saving in the database I convert the image from binary to base64. To do this, I need the image type.

$thumbWidth = 60;
$thumbHeight = 60;
$previewWidth = 80;
$previewHeight = 60;
$bigWidth = 320;
$bigHeight = 240;
$save = false;
$num = 1;
if( is_uploaded_file($_FILES['image1']['tmp_name']) || !($_FILES['image1']['error'] !== UPLOAD_ERR_OK)){
  $save = false;
  $jspan = '';
  $gspan = '';
  $pspan = '';
  switch(strtolower($_FILES['image1']['type'])){
  case 'image/jpeg':
    $image = @imagecreatefromjpeg($_FILES['image1']['tmp_name']);
    if ($image !== false){$save = true;break;}
  case 'image/png':
    $image = @imagecreatefrompng($_FILES['image1']['tmp_name']);
    if ($image !== false){$save = true;break;}
  case 'image/gif':
    $image = @imagecreatefromgif($_FILES['image1']['tmp_name']);
    if ($image !== false){$save = true;break;}
  default:
    $img = @getimagesize($_FILES['image1']['tmp_name']);
    switch(strtolower($img['mime'])){
    case 'image/jpeg':
      $image = @imagecreatefromjpeg($_FILES['image1']['tmp_name']);
      if ($image !== false){$save = true;break;}
    case 'image/png':
      $image = @imagecreatefrompng($_FILES['image1']['tmp_name']);
      if ($image !== false){$save = true;break;}
    case 'image/gif':
      $image = @imagecreatefromgif($_FILES['image1']['tmp_name']);
      if ($image !== false){$save = true;break;}
    default:
      $filename = $_FILES['image1']['name'];
      $ext = substr($filename,-3);
      switch(strtolower($ext)){
      case 'jpg':
        $image = @imagecreatefromjpeg($_FILES['image1']['tmp_name']);
        if ($image !== false){$save = true;break;}
      case 'gif':
        $image = @imagecreatefromgif($_FILES['image1']['tmp_name']);
        if ($image !== false){$save = true;break;}
      case 'png':
        $image = @imagecreatefrompng($_FILES['image1']['tmp_name']);
        if ($image !== false){$save = true;break;}
      default:
        $image = @imagecreatefromjpeg($_FILES['image1']['tmp_name']);
        if ($image !== false){$save = true;break;}
        $image = @imagecreatefrompng($_FILES['image1']['tmp_name']);
        if ($image !== false){$save = true;break;}
        $image = @imagecreatefromgif($_FILES['image1']['tmp_name']);
        if ($image !== false){$save = true;break;}
      }
    }
  }
}

I then scale the image

  $originalWidth  = imagesx($image);
  $originalHeight = imagesy($image);
  $scale      = min($previewWidth/$originalWidth,$previewHeight/$originalHeight);
  $newWidth  = ceil($scale*$originalWidth);
  $newHeight = ceil($scale*$originalHeight);
  $newPic = imagecreatetruecolor($newWidth, $newHeight);
  imagecopyresampled($newPic, $image,0, 0, 0, 0,$newWidth, $newHeight, $originalWidth, $originalHeight);

I then convert to gif, png, and jpg and find which is the most compact.

  ob_start();
  imagejpeg($newPic, NULL, 70);
  $jpg = ob_get_clean();
  ob_clean();
  ob_end_flush();
  $jLen = strlen($jpg);
  ob_start();
  imagepng($newPic, NULL, 9);
  $png = ob_get_clean();
  ob_clean();
  ob_end_flush();
  $pLen = strlen($png);
  ob_start();
  imagegif($newPic);
  $gif = ob_get_clean();
  ob_clean();
  ob_end_flush();
  $gLen = strlen($gif);
  if ($gLen < $jLen){
    if ($pLen < $gLen){
      $raw = $png;
      $png = null;
      $type = 'png';
      $pspan = '<span class="size">';
    }
    else{
      $raw = $gif;
      $gif = null;
      $type = 'gif';
      $gspan = '<span class="size">';
    }
  }
  elseif($pLen < $jLen){
    $raw = $png;
    $png = null;
    $type = 'png';
    $pspan = '<span class="size">';
  }
  else{
    $raw = $jpg;
    $jpg = null;
    $type = 'jpg';
    $jspan = '<span class="size">';
  }

I then convert to base64 using the $type: data:image/$type

  $base64 = base64_encode($raw);
  $thumb1 = "#thumb1{background-image:url('data:image/$type;base64,$base64')}";

The I escape the base64 image before saving it to the database.

$thumb1 = mysqli_real_escape_string($con,$thumb1);

Uploading image in database

1 Answers1