Re: Uploading Image using PHP and mySQL
| From: | Chris | Date: | Mon, 18 Feb 2008 23:56:47 +0000 |
| Subject: | Re: Uploading Image using PHP and mySQL | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-44625@lists.php.net to get a copy of this message | ||
Nasreen Laghari wrote:
Hi All, First of all A very big thank you to all of you for solving my Password() encryption problem. Now I'm stuck on new problem which is image not uploading. I'm using the following code.Which bit breaks exactly? Nobody's going to read through 200 lines of code.. $query = "INSERT INTO artist (name,about_u,imgdata, profile_url) VALUES('$aname','$aboutu','$uploadedImage','$url_provided')"; You have an sql injection problem here. Read up about that on the phpsec.org site: http://phpsec.org/projects/guide/3.html#3.2 and a really good basic guide here: http://unixwiz.net/techtips/sql-injection.html -- Postgresql & php tutorials http://www.designmagick.com/