Does my localhost have a build in temporary file to store images?

[zhiyuan]

Hello everyone:

i been trying to write a php script to upload an image to my file within my root file localhost/gw. so then i could display it on a different page, but the book i'm learning from say the image will first upload to a tmp file on the localhost, however, i could not find this tmp file they are talking about,or even where the image go after i click add or submit. so do i have to crate a tmp file, and let the image first store in? i already write the command on php to redirect the file from tmp

 
    $target=gw_uploadpath.$screenshot;
    if(move_uploaded_file($_FILES['screenshot']['tmp_name'], $target)){
 

[dgreenhouse]

The temp file is created automatically via the files post.

See: http://php.net/manual/en/features.fi...ost-method.php

[zhiyuan]

cool, is there anyway i could locate this temporary file? or is it hidden? because i keep trying to find it but i can't seem to find it at all. and did i use the command correctly? or is there any other better way to move it? cos from my understanding is the command move the uploaded file to tempoary file then from temp move it to the file i crated, am i right? thank you by the way dgreenhous

[dgreenhouse]

Edit: I just modified an example from the PHP man and might have confused the issue with my earlier post...

use:
ini_get("upload_tmp_dir"); // to get the temp upload dir

You need to do it the way noted in the link.
The temp file disappears from the temp dir when the script finishes.
That's why you have to move it.

Here's a simple modification of the example from the PHP man:

<!-- HTML fragment
  The data encoding type, enctype, MUST be specified as below -->
<form enctype="multipart/form-data" action="upload.php" method="POST">
    <!-- MAX_FILE_SIZE must precede the file input field -->
    <input type="hidden" name="MAX_FILE_SIZE" value="30000" />
    <!-- Name of input element determines name in $_FILES array -->
    Send this file: <input name="userfile" type="file" />
    <input type="submit" value="Send File" />
</form>
 

// file: upload.php
$uploaddir = ini_get("upload_tmp_dir") . "/" ;
echo $uploadfile; // Just see the temp dir
 
$target = gw_uploadpath.$screenshot;
/* or
$target = gw_uploadpath.basename($_FILES['userfile']['name'])
 
I assume gw_uploadpath is a constant
*/
 
echo '<pre>';
 
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $target)) {
    echo "File is valid, and was successfully uploaded.\n";
} else {
    echo "Possible file upload attack!\n";
}
 
echo 'Here is some more debugging info:';
 
print_r($_FILES); // See the $_FILES array
 
print "</pre>";
 

[zhiyuan]

<?php
define('guitar_uploadpath','images/');

if(isset($_POST['submit'])){

//get score data from the post
$name=$_POST['name'];
$score=$_POST['score'];
$screenshot=$_FILES['screenshot']['name'];

if(!empty($name)&&!empty($score)&&!empty($screensh ot)){
$target=guitar_uploadpath.$screenshot;
if(move_uploaded_file($_FILES['screenshot']['tmp_name'], $target)){

$dbc=mysqli_connect('','','','guitar')
or die('Error connect database');

$query="insert into guitarwars values (0, now(), '$name', '$score', '$screenshot')";
mysqli_query($dbc, $query)
or die('error querying');

echo'<p>Thanks for adding your new high score!</p>';
echo'<p><strong>Name:</strong>'.$name.'<br/>';
echo'<strong>Score:</strong>'.$score.'</p>';
echo'<img src="'.guitar_uploadpath.$screenshot.'" alt="Score image"/></p>';
echo'<p><a href="index.php">&lt;&lt; Back to high scores</a></p>';

$name="";
$score="";

mysqli_close($dbc);
}

else{
echo'<p class="error">Please enter all of the infor to add your score.</p>';
}
}
}
?>

<h2>Guitar Wars - Add Your Score</h2>

<hr/>
<form enctype="multipart/form-data" method="post" action="<?php echo $_SERVER['php_self'];?>">
<input type="hidden" name="max_file_size" value="32768"/>
<label for="name">Name:</label>
<input type="text" id="name" name="name" value="<?php if (!empty($name)) echo $name;?>"/><br/>
<label for="score">Score:</label>
<input type="text" id="score" name="score" value="<?php if(!empty($score)) echo $score;?>"/><br/>
<label for="screenshot">Screen Shot:</label>
<input type="file" id="screenshot" name="screenshot"/><hr/>
<input type="submit" value="add" name="submit"/>
</form>

</body>
</html>

[zhiyuan]

here is my add score php, ok so after i try it again and read your respond i stil have this few problem, first after i type in name score and select an image after clicking submit my echo message come out saying that i need to input all information, but when the message come out the file field where the image go is empty again. i chose some randome jpg image just to text it out. and the gw_uploadpath is a constant i just read over again from the book i'm learning from. by the way do i have to crate an images folder under my web folder thats inside of localhost? oh sorry about the very last respond, thank you again greenhouse

[zhiyuan]

and one more thing what ini_get do different from move_uploaded_file?

[zhiyuan]

hello another question lol, in the guitar_uploadpath would this be a folder thats under my web folder? and if it is do i crate one folder under my web folder name guitar uploadpath?

[zhiyuan]

(!empty($name)&&!empty($score)&&!empty($screensh ot)){
$target=guitar_uploadpath.$screenshot;
if(move_uploaded_file($_FILES['screenshot']['tmp_name'], $target)){

$dbc=mysqli_connect('','','','guitar')
or die('Error connect database');

$query="insert into guitarwars values (0, now(), '$name', '$score', '$screenshot')";
mysqli_query($dbc, $query)
or die('error querying');

echo'<p>Thanks for adding your new high score!</p>';
echo'<p><strong>Name:</strong>'.$name.'<br/>';
echo'<strong>Score:</strong>'.$score.'</p>';
echo'<img src="'.guitar_uploadpath.$screenshot.'" alt="Score image"/></p>';
echo'<p><a href="index.php">&lt;&lt; Back to high scores</a></p>';

$name="";
$score="";

mysqli_close($dbc);
}

else{
echo'<p class="error">Please enter all of the infor to add your score.</p>';

here is my problem why is it after !empty($screenshot) and i input an image but the echo still come up as enter all information?