Just realised if I use the variable message without die the extension type validation fails it upload other files type even thou I've validate so it doesnt.
PHP Code:
<?php
include "connection.php"; // find file (connection.php)
if (isset ($_POST["submit"])) { // if post has been set/clicked run the code below
// Configuration - Your Options
$allowed_filetypes = array('.jpg','.gif','.bmp','.png'); // These will be the types of file that will pass the validation.
$max_filesize = 524288; // Maximum filesize in BYTES (currently 0.5MB).
$upload_path = './images/'; // The place the files will be uploaded to (currently a 'files' directory).
$filename = $_FILES["userfile"]["name"]; // Get the name of the file (including file extension).
$ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.
// Check if the filetype is allowed, if not DIE and inform the user.
if(!in_array($ext,$allowed_filetypes))
$message = 'The file you attempted to upload is not allowed.';
// Now check the filesize, if it is too large then DIE and inform the user.
if(filesize($_FILES["userfile"]["tmp_name"]) > $max_filesize)
$message = 'The file you attempted to upload is too large.';
// Check if we can upload to the specified path, if not DIE and inform the user.
if(!is_writable($upload_path))
$message = 'You cannot upload to the specified directory, please CHMOD it to 777.';
$filename = time().$ext; // this will give the file current time so avoid files having the same name
// Upload the file to your specified path.
if(move_uploaded_file($_FILES["userfile"]["tmp_name"],$upload_path . $filename)){
$query = "INSERT INTO animals (id, image)
VALUES ('', '$filename')";
mysql_query($query) or
die (mysql_error());
echo time(). ' Your file upload was successful, view the file <a href="' . $upload_path . $filename . '" title="Your File">here</a>';
$current_url = (empty($_SERVER['HTTPS']) ? "http://" : "https://") . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
header ('Location: ' . $current_url);
exit ();
// It worked.
}
else
echo 'There was an error during the file upload. Please try again.'; // It failed :(.
//http://stackoverflow.com/questions/2666882/how-to-avoid-resending-data-on-refresh-in-php
//scape string http://stackoverflow.com/questions/13034868/form-to-insert-data-in-database-works-but-does-not-show-success-page
}
?>
<form name="form" action="<?php echo $_SERVER['PHP_SELF']; ?>" enctype="multipart/form-data" method="post">
<h2>Upload an image</h2>
Upload an image: <br /><INPUT type="file" name="userfile">
<br />
<input type="submit" name="submit" value="Submit">
</form>
<?php echo $message; ?>
Reply With Quote
Bookmarks