HTML MYSQL PHP WEB DEVELOPMENT

Upload and Validate an Image in PHP

August 23, 2018August 23, 2018 Web Design Comments(9)

Upload and Validate an Image in PHP

In this tutorial I will explain how to upload a image and how to validate image extension

Create a HTML form with two text field :

One is for Image title with input type text.
Second one is for upload image with input type file.For file upload input must be file(type=”file”). This input type show the file select control.

HTML form must have following attributes :

method=”post”
enctype=”multipart/form-data” (The enctype attribute specifies how the form-data should be encoded when submitting it to the server.)

without these attributes , the image upload will not work.

<form name="uploadimage"  enctype="multipart/form-data" method="post">
<table width="100%"  border="0">
<tr>
<th width="26%" height="60" scope="row">Image Title:</th>
<td width="74%"><input type="text" name="imagetitle"  autocomplete="off" class="form-control" required /></td>
</tr>
 
<tr>
<th height="60" scope="row">Upload Image :</th>
<td><input type="file" name="image"  required /></td>
</tr>
 
<tr>
<th height="60" scope="row">&nbsp;</th>
<td><input type="submit" value="Submit" name="submit" class="btn-primary" /></td>
</tr>
</table>
</form>

<tr>

<th width="26%" height="60" scope="row">Image Title:</th>

</tr>

<tr>

<th height="60" scope="row">Upload Image :</th>

</tr>

<tr>

</tr>

</table>

</form>

Create a database with name imagesdata. Inside this database we create a table with name tblimages.

SQL Script for tblimages

CREATE TABLE IF NOT EXISTS `tblimages` (
  `id` int(11) NOT NULL,
  `ImagesTitle` varchar(120) DEFAULT NULL,
  `Image` varchar(150) DEFAULT NULL,
  `PostingDate` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP
) ENGINE=InnoDB AUTO_INCREMENT=6 DEFAULT CHARSET=latin1;

CREATE TABLE IF NOT EXISTS `tblimages` (

`id` int(11) NOT NULL,

`ImagesTitle` varchar(120) DEFAULT NULL,

`Image` varchar(150) DEFAULT NULL,

`PostingDate` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP

) ENGINE=InnoDB AUTO_INCREMENT=6 DEFAULT CHARSET=latin1;

Now create a database connection file(config.php)

<?php
define('DB_SERVER','localhost');
define('DB_USER','root');
define('DB_PASS' ,'');
define('DB_NAME', 'imagesdata');
$con = mysqli_connect(DB_SERVER,DB_USER,DB_PASS,DB_NAME);
// Check connection
if (mysqli_connect_errno())
{
 echo "Failed to connect to MySQL: " . mysqli_connect_error();
}
?>

<?php

define('DB_SERVER','localhost');

define('DB_USER','root');

define('DB_PASS' ,'');

define('DB_NAME', 'imagesdata');

$con = mysqli_connect(DB_SERVER,DB_USER,DB_PASS,DB_NAME);

// Check connection

if (mysqli_connect_errno())

{

echo "Failed to connect to MySQL: " . mysqli_connect_error();

}

PHP Script for getting posted values, image validation, move images into directory and insertion data into database

Contact form with mail function and Storing data in the database

August 25, 2018August 25, 2018 Web Design

Contact form with mail function and Storing in the database project has two module : User Module admin Module User Module Sql table structure for tblcontactdata table where we will store our data

CREATE TABLE `tblcontactdata` (
  `id` int(11) NOT NULL,
  `FullName` varchar(200) DEFAULT NULL,
  `PhoneNumber` char(12) DEFAULT NULL,
  `EmailId` varchar(200) DEFAULT NULL,
  `Subject` varchar(255) DEFAULT NULL,
  `Message` mediumtext,
  `UserIp` varbinary(16) DEFAULT NULL,
  `PostingDate` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
  `Is_Read` int(1) DEFAULT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;
ALTER TABLE `tblcontactdata`
  MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;

CREATE TABLE `tblcontactdata` (

`id` int(11) NOT NULL,

`FullName` varchar(200) DEFAULT NULL,

`PhoneNumber` char(12) DEFAULT NULL,

`EmailId` varchar(200) DEFAULT NULL,

`Subject` varchar(255) DEFAULT NULL,

`Message` mediumtext,

`UserIp` varbinary(16) DEFAULT NULL,

`PostingDate` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,

`Is_Read` int(1) DEFAULT NULL

) ENGINE=InnoDB DEFAULT CHARSET=latin1;

ALTER TABLE `tblcontactdata`

MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;

Now create a HTML for user inputs. index.php

<form name="ContactForm" method="post">
 
<h4>your name</h4>
<input type="text" name="name" class="user" placeholder="Johne"  autocomplete="off" required>
 
<h4>your phone number</h4>
<input type="text" name="phonenumber" class="phone" placeholder="0900.234.145678" maxlength="10" required autocomplete="off">
 
<h4>your email address</h4>
<input type="email" name="emailaddres" class="email" placeholder="Example@mail.com" required autocomplete="off">
 
<h4>your subject</h4>
<input type="text" name="subject" class="email" placeholder="Subject" autocomplete="off">
 
<h4>your message</h4>
<textarea class="mess" name="message" placeholder="Message" required></textarea>
<input type="submit" value="send your message" name="submit">
</form>

<h4>your phone number</h4>

<h4>your email address</h4>

<h4>your subject</h4>

<h4>your message</h4>

</form>

MYSql database connection

<?php 
// DB credentials.
define('DB_HOST','localhost');
define('DB_USER','root');
define('DB_PASS','');
define('DB_NAME','contactdb');
// Establish database connection.
try
{
$dbh = new PDO("mysql:host=".DB_HOST.";dbname=".DB_NAME,DB_USER, DB_PASS,array(PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES 'utf8'"));
}
catch (PDOException $e)
{
exit("Error: " . $e->getMessage());
}
?>

<?php

// DB credentials.

define('DB_HOST','localhost');

define('DB_USER','root');

define('DB_PASS','');

define('DB_NAME','contactdb');

// Establish database connection.

try

{

$dbh = new PDO("mysql:host=".DB_HOST.";dbname=".DB_NAME,DB_USER, DB_PASS,array(PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES 'utf8'"));

}

catch (PDOException $e)

{

exit("Error: " . $e->getMessage());

}

Insert Data into Database

include('config.php');
if(isset($_POST['submit']))
{
// getting Post values	
$name=$_POST['name'];
$phoneno=$_POST['phonenumber'];
$email=$_POST['emailaddres'];
$subject=$_POST['subject'];
$message=$_POST['message'];
$uip = $_SERVER ['REMOTE_ADDR'];
$isread=0;
// Insert quaery
$sql="INSERT INTO  tblcontactdata(FullName,PhoneNumber,EmailId,Subject,Message,UserIp,Is_Read) VALUES(:fname,:phone,:email,:subject,:message,:uip,:isread)";
$query = $dbh->prepare($sql);
// Bind parameters
$query->bindParam(':fname',$name,PDO::PARAM_STR);
$query->bindParam(':phone',$phoneno,PDO::PARAM_STR);
$query->bindParam(':email',$email,PDO::PARAM_STR);
$query->bindParam(':subject',$subject,PDO::PARAM_STR);
$query->bindParam(':message',$message,PDO::PARAM_STR);
$query->bindParam(':uip',$uip,PDO::PARAM_STR);
$query->bindParam(':isread',$isread,PDO::PARAM_STR);
$query->execute();
$lastInsertId = $dbh->lastInsertId();
if($lastInsertId)
{
//mail function for sending mail
$to=$email; 
$headers .= "MIME-Version: 1.0"."\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1'."\r\n";
$headers .= 'From:PHPGurukul Contact Form Demo<info@phpgurukul.com>'."\r\n";
$ms.="<html></body><div>
<div><b>Name:</b> $name,</div>
<div><b>Phone Number:</b> $phoneno,</div>
<div><b>Email Id:</b> $email,</div>";
$ms.="<div style='padding-top:8px;'><b>Message : </b>$message</div><div></div></body></html>";
mail($to,$subject,$ms,$headers);
echo "<script>alert('Your info submitted successfully.');</script>";
}
else 
{
echo "<script>alert('Something went wrong. Please try again');</script>";
}
}

include('config.php');

if(isset($_POST['submit']))

{

// getting Post values

$name=$_POST['name'];

$phoneno=$_POST['phonenumber'];

$email=$_POST['emailaddres'];

$subject=$_POST['subject'];

$message=$_POST['message'];

$uip = $_SERVER ['REMOTE_ADDR'];

$isread=0;

// Insert quaery

$sql="INSERT INTO tblcontactdata(FullName,PhoneNumber,EmailId,Subject,Message,UserIp,Is_Read) VALUES(:fname,:phone,:email,:subject,:message,:uip,:isread)";

$query = $dbh->prepare($sql);

// Bind parameters

$query->bindParam(':fname',$name,PDO::PARAM_STR);

$query->bindParam(':phone',$phoneno,PDO::PARAM_STR);

$query->bindParam(':email',$email,PDO::PARAM_STR);

$query->bindParam(':subject',$subject,PDO::PARAM_STR);

$query->bindParam(':message',$message,PDO::PARAM_STR);

$query->bindParam(':uip',$uip,PDO::PARAM_STR);

$query->bindParam(':isread',$isread,PDO::PARAM_STR);

$query->execute();

$lastInsertId = $dbh->lastInsertId();

if($lastInsertId)

{

//mail function for sending mail

$to=$email;

$headers .= "MIME-Version: 1.0"."\r\n";

$headers .= 'Content-type: text/html; charset=iso-8859-1'."\r\n";

$headers .= 'From:PHPGurukul Contact Form Demo<info@phpgurukul.com>'."\r\n";

$ms.="<html></body><div>

<div><b>Phone Number:</b> $phoneno,</div>

<div><b>Email Id:</b> $email,</div>";

$ms.="<div style='padding-top:8px;'><b>Message : </b>$message</div><div></div></body></html>";

mail($to,$subject,$ms,$headers);

echo "<script>alert('Your info submitted successfully.');</script>";

}

else

{

echo "<script>alert('Something went wrong. Please try again');</script>";

}

9 Replies to “Upload and Validate an Image in PHP”

Chad says:

April 25, 2019 at 9:33 pm

It is great how you made a complex issue sound so simple, thank you so so much.

Reply
Owen G says:

April 26, 2019 at 3:35 am

Good advice. I still see people not validating file types, which can, of course, have security implications.

Reply
Arun says:

April 26, 2019 at 11:53 am

Thank you for the simple explanation.. daily I learn something new from your blog. Thank you so much .

Reply
1. Web Design says:
  
  April 26, 2019 at 6:40 pm
  
  am glad you are grabbing something.
  
  Reply
Rose Ann Sales says:

April 26, 2019 at 4:10 pm

Thanks for sharing this wonderful blog post. It is so helpful and easy to understand.

Reply
Genny Gall says:

April 26, 2019 at 11:25 pm

I need to learn more about this, codes for me are a little too much

Reply
1. Web Design says:
  
  April 27, 2019 at 12:30 am
  
  determination is all you need.
  
  Reply
Ana says:

April 27, 2019 at 12:20 am

I loved how you explained step by step process of validating an image. I feel like every day I learn something new through my blog!

Reply
1. Web Design says:
  
  April 27, 2019 at 12:22 am
  
  Thanks Ann
  
  Reply