NamePros.Com (http://www.namepros.com/)
-   Programming (http://www.namepros.com/programming/)
-   -   [PHP] image uploading (http://www.namepros.com/programming/463660-php-image-uploading.html)

liam_d 04-30-2008 02:05 AM

[PHP] image uploading
 
I currently have this which works pretty dam well.
Although i want to allow more than just jpg files to be uploaded, i also want the names to be proper randomized as right now it keeps the same name so there could be many conflicts :(

PHP Code:
$imagename = $_FILES['new_image']['name'];

        
$source = $_FILES['new_image']['tmp_name'];

        
$target = "images/uploads/".$imagename;

        
move_uploaded_file($source, $target);

              

        
$imagepath = $imagename;

        
$save = "images/uploads/" . $imagepath; //This is the new file you saving

        
$file = "images/uploads/" . $imagepath; //This is the original file



        
list($width, $height) = getimagesize($file) ;

                                                         

        
$diff = $width;



        
$save = "images/uploads/thumb_" . $imagepath; //This is the new file you saving

        
$file = "images/uploads/" . $imagepath; //This is the original file



        
list($width, $height) = getimagesize($file) ;

                                                         

        
$tn = imagecreatetruecolor(150, 150) ;

        
$image = imagecreatefromjpeg($file) ;

        
imagecopyresampled($tn, $image, 0, 0, 0, 0, 150, 150, $width, $height) ;

                                                        

        
imagejpeg($tn, $save, 100) ;

        

        
$sql = "UPDATE `listings` SET `screenshot` = '{$imagepath}', `thumbnail_screenshot` = 'thumb_{$imagepath}' WHERE `scriptid` = '{$_GET['lid']}'";

        

        
mysql_query($sql);

Daniel 04-30-2008 08:24 AM

Just change the $imagename parametre to change what it's called.

Perhaps more importantly, you're putting unescaped code directly into a SQL statement, you need to fix that.

liam_d 05-01-2008 03:02 AM

That is just a test file don't worry about the sql input only me using it.

And thanks.


All times are GMT -7. The time now is 12:06 PM.
Site Sponsors
Advertise your business at NamePros

Powered by: vBulletin Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 2.4.0