Forum:

Uploading a file other than an image.

Ranch Hand

Posts: 85

posted 11 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi fellas, I'm writing an application that will allow a user to upload a .pdf, .doc or .xls file. I still get an error whenever I upload that: The screen shot must be a GIF, JPEG, or PNG image file no greater than 3200000 KB in size. Isn't it possible to upload a pdf/doc(x) file in php and store it in a database of MySql. This program works well if i upload image file within the specified size. Learning sometimes can be frustrating!

The addscore script that should allow .pdf and co:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
  
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  
<title>Guitar Wars - Add Your High Score</title>
  
<link rel="stylesheet" type="text/css" href="style.css" />

</head>

<body>
  
<h2>Guitar Wars - Add Your High Score</h2>

<?php
 
  // Define the upload path and maximum file size constants
  require_once('appvars.php');
  require_once('connectvars.php');

if (isset($_POST['submit'])) {
    // Grab the score data from the POST
    
  $name = $_POST['name'];
    
  $score = $_POST['score'];
  $screenshot = $_FILES['screenshot']['name'];
  $screenshot_type = $_FILES['screenshot']['type'];
  $screenshot_size = $_FILES['screenshot']['size'];

if (!empty($name) && !empty($score) && !empty($screenshot)) {
    if ((($screenshot_type == 'image/gif') || ($screenshot_type == 'image/jpeg') ||
      ($screenshot_type == 'image/pjpeg') || ($screenshot_type == 'image/png') ||
      ($screenshot_type == 'image/pdf') || ($screenshot_type == 'image/doc')) &&
      ($screenshot_size > 0) && ($screenshot_size <= GW_MAXFILESIZE)) {
      if ($_FILES['screenshot']['error'] == 0) {

//Move the file to the target upload folder
        $target = GW_UPLOADPATH . $screenshot;

if (move_uploaded_file($_FILES['screenshot']['tmp_name'], $target)) {
          // Connect to the database
      
          $dbc = mysqli_connect(DB_HOST, DB_USER, DB_PASSWORD, DB_NAME);

// Write the data to the database
      
          $query = "INSERT INTO guitarwars VALUES (0, NOW(), '$name', '$score', '$screenshot')";
      
          mysqli_query($dbc, $query);

// Confirm success with the user
      
          echo '<p>Thanks for adding your new high score!</p>';
      
          echo '<p><strong>Name:</strong> ' . $name . '<br />';
      
          echo '<strong>Score:</strong> ' . $score . '<br />';
        
          echo '<img src="' . GW_UPLOADPATH .$screenshot.'" alt="Score image" /></p>';

echo '<p><a href="index.php"><< Back to high scores</a></p>';

// Clear the score data to clear the form
      
          $name = "";
      
          $score = "";

$screenshot ="";
      
          mysqli_close($dbc);
    
        }
        else {
      
           echo '<p class ="error">Sorry, there was a problem uploading your screen shot image.</p>';
 
        }
      }
    }
    
    else {
      echo '<p class="error">The screen shot must be a GIF, JPEG, or PNG image file no ' .
        'greater than ' . (GW_MAXFILESIZE / 1024) . ' KB in size.</p>';
    }

// Try to delete the temporary screen shot image file
     @unlink($_FILES['screenshot']['tmp_name']);

}
  else {
    echo '<p class="error">Please enter all of the information to add your high score.</p>';

}

<label for="score">Score:</label>

<br />

<label for="screenshot">Screen shot:</label>
    <input type="file" id="screenshot" name="screenshot" />
    
    <hr /> 
    <input type="submit" value="Add" name="submit" />

</form>

</body>

</html>

The appvars.php code:

This is the index page:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
  
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  
<title>Guitar Wars - High Scores</title>
  
<link rel="stylesheet" type="text/css6"href="style.css" />

</head>

<body>
 
<h2>Guitar Wars - High Scores</h2>
  
<p>Welcome, Guitar Warrior, do you have what it takes to crack the high score list? If so, just <a href="addscore.php">add your own score</a>.</p>

<hr />

<?php
  
require_once('appvars.php');
require_once('connectvars.php');

// Connect to the database 
  
     
$dbc = mysqli_connect(DB_HOST, DB_USER, DB_PASSWORD, DB_NAME) or die("Error querying database");

// Retrieve the score data from MySQL
  
$query = "SELECT * FROM guitarwars ORDER BY name ASC" ;
    
$data = mysqli_query($dbc, $query);

// Loop through the array of score data, formatting it as HTML 
  
echo '<table>';
$i = 0;

while ($row = mysqli_fetch_array($data)) { 
    
    // Display the score data
    
    if ($i == 0) {
      echo '<tr><td colspan="2" class="topscoreheader">Top Score:'.
      $row['score'].'</td></tr>';
    }

echo '<tr><td class="scoreinfo">';
   
    echo '<span class="score">' . $row['score'] . '</span><br />';

echo '<strong>Name:</strong> ' . $row['name'] . '<br />';

echo '<strong>Date:</strong> ' . $row['date'] . '</td>';
    if(is_file(GW_UPLOADPATH . $row['screenshot']) && filesize(GW_UPLOADPATH . $row['screenshot']) > 0) {
      echo '<td><img src ="' . GW_UPLOADPATH . $row['screenshot'] .'"alt="Score image" /></td></tr>';
  
    }
    else {
      echo '<td><img src="' . GW_UPLOADPATH . 'unverified.gif' .
        '" alt="Unverified score" /></td></tr>';
    }

$i++;

}
  
  echo '</table>';

mysqli_close($dbc);

</body>

</html>

Thank you in anticipation.

Nick Charles

Ranch Hand

Posts: 71

I like...

posted 11 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

You are using the wrong mime types. For example, a .docx file uses the mime type application/vnd.openxmlformats-officedocument.wordprocessingml.document. Here is a list of the various Microsoft Office document mime types:
http://filext.com/faq/office_mime_types.php

I'll let you Google for the other mime types.

By the way, why not add the mime type to the error message on lines 91-92, that is a good way to find out mime types of file types that you can't handle.

Shamsudeen Akanbi

Ranch Hand

Posts: 85

posted 11 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Thank You bro, it worked like a charm! The only problem i'm facing now is that now that i can upload pdf and doc files, i can't upload pictures anymore. It has to do with something in my script so i'm trying to sort it myself. Thank you once again.

With a little knowledge, a cast iron skillet is non-stick and lasts a lifetime.