asked on

Creating an upload system

Hello am trying to create an upload system that that that automatically displays the uploaded contents( Doc, img, zip) and fetches and displays the id, first name and department of the user who uploaded the file from a database i already have whiles displaying

1.uploaded file name
2.Document name
3.size
4.Type
5.Download file button
6.Delete link

I have the information of the registered user and that of the upload system on different tables
The system should allow the user upload unlimited files without overwriting the previous ones

This is what i currently have for the upload.php

<?php
$page_title = "Databse System-Search";
include_once 'partials/headupload.php';

require_once('config/connect.php');
if(isset($_FILES) & !empty($_FILES)){
	$name = $_FILES['profile']['name'];
	$size = $_FILES['profile']['size'];
	$type = $_FILES['profile']['type'];
	$tmp_name = $_FILES['profile']['tmp_name'];
}
$location = "Doc-uploads/";
$maxsize = 10000000;
if(isset($name) &!empty($name)){
	if($type == "image/jpeg" && $size <= $maxsize){
		if(move_uploaded_file($tmp_name, $location.$name)){
			
			$sql = "INSERT INTO `upload` (name, size, type, location) VALUES ('$name', '$size', '$type', '$location$name')";
			$res = mysqli_query($connection, $sql);
			if($res){
				echo "Uploaded successfully";
			}
		}else{
			echo "Failed to Upload";
		}
	}else{
		echo "File should be jpeg image & only 100 kb in size";
	}
}

Open in new window

<form method="post" enctype="multipart/form-data">
							  
							          <div class="form-group">
                        <label for="Uid"><b>User ID</b></label>
                        <input type="text" name="Uid" value="Staff <?php if(isset($_SESSION['id'])) echo $_SESSION['id']; ?>" class="form-control" id="Uid" required>
                    </div>
							  <div class="form-group">
                        <label for="upname"><b>Uploader Name</b></label>
                        <input type="text" name="upname" value="<?php if(isset($_SESSION['username'])) echo $_SESSION['username']; ?>" class="form-control" id="upname" required>
                    </div> 
							  <div class="form-group">
                        <label for="min"><b>Ministry</b></label>
                        <input type="text" name="min" value="" class="form-control" id="min" required>
                    </div>
               <div class="form-group">
                 <label for="DN"><b>Document Name</b></label>
                   <input name="DN" type="text" required class="form-control" id="DN" placeholder="Document Name" >
                 </div>
				
                  <div class="form-group">
		    <label for="exampleInputFile">File input</label>
		    <input type="file" name="profile" id="exampleInputFile">
		   <!-- <p class="help-block">Example block-level help text here.</p>-->
		  </div>

		  <button type="submit" class="btn btn-primary">Submit</button>
             </form >

Open in new window

And this is for displaying the uploaded files

<?php
$page_title = "Database System-";
include_once 'partials/upload-before.php';
require_once('config/connect.php');
$sql = "SELECT * FROM `upload`";
$res = mysqli_query($connection, $sql);

?>

Open in new window

<div class="row">
		<table class="table">
			<tr>
				<th>S.No</th>
				<th>Name</th>
				<th>Size</th>
				<th>Type</th>
				<th>Location</th>
				<th>Delete</th>
			</tr>
			<?php 
				while ($r = mysqli_fetch_assoc($res)) {
			?>
			<tr>
				<td><?php echo $r['id']; ?></td>
				<td><?php echo $r['name']; ?></td>
				<td><?php echo $r['size']; ?></td>
				<td><?php echo $r['type']; ?></td>
				<td><?php echo $r['location']; ?></td>
				<td><a href="delete.php?id=<?php echo $r['id']; ?>">Delete</a></td>
			</tr>
			<?php } ?>
		</table>
	</div>

Open in new window

Chris Stanyon

Hi Abraham,

Couple of things. If you want to tag an upload with a User, then you're going to need to store the User ID in the upload table. To do that, add a column to the upload table called something like user_id. Then when you insert your new record, make sure you insert the user id as well:

INSERT INTO upload (name, size, type, location, user_id) VALUES (?, ?, ?, ?, ?);

Once you've done that, then you can do a query with a JOIN to select the files and the user information in one go.

SELECT users.name, users.email, upload.name, upload.type, upload.id
FROM users
JOIN upload
ON users.id = upload.user_id

For your upload form, don't rely on a form input to store the User ID. Keep that value in a SESSION variable and use that instead - it's safer.