I also agree with Larry and Brian. Although there are some gains in using
blobs, such as not having to worry about backing up the database and the
files, for 99% of users this is simply not a problem. Directory based files
are much more visible and manageable.
To qualify the 'security' aspect of using directory based files, you simply
create a script called 'showimage.php' which contains :-
echo fread($filename,10000000);
....which reads the file to the browser (max 10MB in this case). The script
will also need to output the relevant headers first :-
header("Content-type: image/jpeg");
...or ...
header("Content-type: image/gif");
You then call your new image-display program with :-
<image src='showimage.php?id=123456'>
The image id relates to a SQL database record, which holds the full filename
and location of the file on disk. This is passed to the '$filename' variable.
Showimage.php can do whatever security checks you need to be done, before
delivering the file to the end user. Of course, this method can be used for
any type of content you want to deliver, i.e. PDF documents.
Rob.
-----Original Message-----
From: php-objects@xxxxxxxxxxxxxxx [mailto:php-objects@xxxxxxxxxxxxxxx] On
Behalf Of Brian Cummiskey
Sent: 24 April 2007 15:41
To: php-objects@xxxxxxxxxxxxxxx
Subject: Re: Re: jpg files in mysql
I 100% agree with Larry.
The file system is FAR better suited to handle images than a BLOB field in a
database.
***********************************************************************************
Any opinions expressed in email are those of the individual and not necessarily those of the company. This email and any files transmitted with it are confidential and solely for the use of the intended recipient
or entity to who they are addressed. It may contain material protected by attorney-client privilege. If you are not the intended recipient, or a person responsible for delivering to the intended recipient, be advised that you have received this email in error and that any use is strictly prohibited.
Random House Group + 44 (0) 20 7840 8400
http://www.randomhouse.co.uk
http://www.booksattransworld.co.uk
http://www.kidsatrandomhouse.co.uk
Generic email address - enquiries@xxxxxxxxxxxxxxxxx
Name & Registered Office:
THE RANDOM HOUSE GROUP LIMITED
20 VAUXHALL BRIDGE ROAD
LONDON
SW1V 2SA
Random House Group Ltd is registered in the United Kingdom with company No. 00954009, VAT number 102838980
***********************************************************************************
