PHP DB - Re: [PHP-DB] Uploading Image using PHP and mySQL

You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author

Re: [PHP-DB] Uploading Image using PHP and mySQL

Chris

2008-02-18, 10:02 pm

Nasreen Laghari wrote:
> Hi All,
>
> First of all A very big thank you to all of you for solving my Password() encryption problem.
>
> Now I'm stuck on new problem which is image not uploading. I'm using the following code.

Which bit breaks exactly? Nobody's going to read through 200 lines of code..

$query = "INSERT INTO artist (name,about_u,imgdata, profile_url)
VALUES('$aname','$aboutu','$uploadedImag
e','$url_provided')";

You have an sql injection problem here. Read up about that on the
phpsec.org site:

http://phpsec.org/projects/guide/3.html#3.2

and a really good basic guide here:

http://unixwiz.net/techtips/sql-injection.html

--
Postgresql & php tutorials
http://www.designmagick.com/

Sponsored Links