Trying to upload file to MySQL, file not found

[mlevit]

I'm trying to upload a file. I use to get the fread(): supplied argument is not a valid stream resource error, but then I placed the code in an if statement with file_exists.

The problem is, the if statement never gets executed.

if ($_POST)
    {
        include ('scripts/db_connect.php');
 
        $reviewId = $_POST['review_id'];
        $form_data = $_POST['form_data'];
 
        if (file_exists($form_data))
        {
            $data = addslashes(fread(fopen($form_data, "r"), filesize($form_data)));
 
            $query = "INSERT INTO uploads (report_id, report_data, report_filename, report_filesize, report_filetype)"
                        . "VALUES (" . $reviewId . ",'" . $data . "','" . $form_data_name . "','" . $form_data_size . "','" . $form_data_type. "')";
 
            if (mysql_query($query))
            {
                // Upload successfull
                ?>
                <div id="success_box">
                    <div id="success_box_text">The report has been uploaded successfully.</div>
                </div>
                <?php
            }
        }
        else
        {
            echo "File not found";
        }
 
        include ('scripts/db_close.php');
    }

Anyone know what's going on here?

[Dormilich]

uploaded files are to be found in $_FILES not $_POST. that's why your if statement doesn't get executed.

[Markus]

The file doesn't exist - simple. :P

What does $form_data hold?

[mlevit]

Ok I've updated my code, still nothing.

<form action="members.php" method="post" enctype="multipart/form-data">
                                        Report Upload:<input type="file" name="form_data" id="form_data" size="30" />
                                        <input type="hidden" name="MAX_FILE_SIZE" value="1000000"> 
                                        <input type="hidden" name="review_id" value="<?php echo $reviewID; ?>" />
                                        <input class="submit" value="Upload" id="submit1" type="submit" style="text-align: center; float: none;"/>
                                    </form>

include ('scripts/db_connect.php');
        $reviewId = $_POST['review_id'];
 
        if(isset($_POST[’upload’]) && $_FILES['form_data'][’size’] > 0)
        {
            $fileName = $_FILES['form_data'][’name’];
            $tmpName = $_FILES['form_data'][’tmp_name’];
            $fileSize = $_FILES['form_data'][’size’];
            $fileType = $_FILES['form_data'][’type’];
            $fp = fopen($tmpName, ‘r’);
            $content = addslashes($content);
            fclose($fp);
 
            echo $fileName . "1\n";
            echo $tmpName . "2\n";
            echo $fileSize . "3\n";
            echo $fileType . "4\n";
 
            if(!get_magic_quotes_gpc())
            {
                $fileName = addslashes($fileName);
            }
 
            $query = "INSERT INTO report (report_id, report_data, report_filename, report_filesize, report_filetype)"
                                . "VALUES (" . $reviewId . ",'" . $content’ . "','" . $fileName’ . "','" . $fileSize’ . "','" . $fileType’. "')";
 
            $result = mysql_query($query);
 
            if (!$result) 
            {
                echo mysql_error();
            }
        }
 
        include ('scripts/db_close.php');

It doesn't enter the IF statement because $_FILES['form_data'][’size’] is never more than zero. Why doesn't it see the file?

[Markus]

You have no form element with the name 'upload', so the if conditional fails.

[mlevit]

Fair enough. I've removed that part of the if statement but it still doesn't pass the

$_FILES['form_data'][’size’] > 0

part. Can anyone recommend me an upload script they actually know works?

[Markus]

http://www.w3schools.com/PHP/php_file_upload.asp