Inserting new 'Field' into Table Database

Forums › IT Pro and developers › Inserting new 'Field' into Table Database

1 | 2

nate

6473 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#402272 9-Nov-2010 17:57

hamisht: The file needs to re-named while being uploaded, or after uploading, because someone might upload 'photo1.jpg' and overwrite someone elses 'photo1.jpg'.

I would put all the images in a folder (such as /images) then put each user's images in a subfolder (such as images/15/ or images/10/) then there's no worries with overwriting.

hamisht

389 posts

Ultimate Geek

#402589 10-Nov-2010 10:32

Thanks for that suggestion nate, but I don't want to complicate things any further ;)

Good news though, the renaming is working! yay!

My Blu-Ray Collection

ScottStevensNZ

245 posts

Master Geek

#402599 10-Nov-2010 10:35

hamisht: Thanks for that suggestion nate, but I don't want to complicate things any further ;)

Good news though, the renaming is working! yay!

Awesome Sauce :)

Load & Performance Tester/PHP/JSP/C/PERL/MYSQL/LoadRunner8->11/HTML/CSS/XML/XSLT/2B|!2B/Cervelo Soloist/EMC Equip4/ Samsung Galaxy S /Darkys 10.2 Extreme

Do androids dream of electric sheep?
use strict;
my $sheepCount;

Yes, they can.

wazzageek

1093 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#414336 7-Dec-2010 22:35

Very snip-happy:

hamisht: this is my page 'uploadimages.php':


    $newcatagory = $_POST['newcatagory'];

    // RECORD INPUT
    $emailupload = $_POST['emailupload'];
    $description = $_POST['description'];
    $date = $_POST['date'];

Don't forget to mistrust ALL data that comes from the browser - put in some checking / validation / cleansing on the input to ensure that some clown doesn't set the $_POST['newcatagory'] to something like "; drop table catagory; --"

(Hint - mysql_escape_string())

Another option may be to use either an abstraction layer (ADODB) or mysqli commands.

Did I also mention that you should never trust the data from the browser ...

1 | 2