code isn't parsing mysql ...

Patrick Roane <fojomo@xxxxxxxxxxxxx> · Sat, 12 Feb 2005 16:30:46 -0800 (PST)

Can anyone take a look at my code to see why the mysql components are being ignored?

-------------------------------------------------------------------------------------------------------------------------------

<!DOCTYPE html PUBLIC
 "-//W3C//DTD XHTML 1.0 Strict//EN"
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd";>
<html>
<head>
<title>Listing 13.1 Opening a Connection to a Database</title>
</head>
<body>
<?php
global $strDesc;
global $fileUpload;
global $fileUpload_name;
global $fileUpload_size;
global $fileUpload_type;
if ( ! empty( $_REQUEST['strDesc'] )&&
 ! empty( $_REQUEST['fileUpload'] ) ){
         // check user input here!
   $dberror = "";
  $ret = add_to_database( $_REQUEST['strDesc'],
                  $_REQUEST['fileUpload'], $_REQUEST['fileUpload_type'], $_REQUEST['fileUpload_name'], $_REQUEST['fileUpload_size'], $dberror );
  if ( ! $ret ) {
   print "Error: $dberror<br />\n";
  } else {
    echo "<h1>File Uploaded</h1>";
echo "The details of the uploaded file are shown below:<br><br>";
echo "<b>File name:</b> $fileUpload_name <br>";
echo "<b>File type:</b> $fileUpload_type <br>";
echo "<b>File size:</b> $fileUpload_size <br>";
echo "<b>Uploaded to:</b> $fileUpload <br><br>";
echo "<a href='uploadfile.php'>Add Another File</a>";
  }
   } else {
  write_form();

}
function add_to_database( $strDesc, $fileUpload, $fileUpload_name, $fileUpload_size, $fileUpload_type, &$dberror ) {
 $strDesc = mysql_real_escape_string( $strDesc );
    $fileUpload = mysql_real_escape_string( $fileUpload );
 $fileUpload_name = mysql_real_escape_string( $fileUpload_name );
 $fileUpload_size = mysql_real_escape_string( $fileUpload_size );
 $fileUpload_type = mysql_real_escape_string( $fileUpload_type );
    $fileHandle = fopen($fileUpload, "r");
 $fileContent = fread($fileHandle, $fileUpload_size);
 $fileContent = addslashes($fileContent);

 $link = mysql_pconnect( "localhost", "", "" );
 if ( ! $link ) {
  $dberror = mysql_error();
  return false;
 }
 if ( ! mysql_select_db( "myfiles", $link ) ) {
  $dberror = mysql_error();
     return false;
    }
 $query = "INSERT INTO myblobs( strDesc, fileUpload, fileUpload_name, fileUpload_size, fileUpload_type )
  values('$strDesc', '$fileUpload', '$fileUpload_name', '$fileUpload_size', '$fileUpload_type' )";
    if ( ! mysql_query( $query, $link ) ) {
  $dberror = mysql_error();
  return false;
  }

  return true;
}
function write_form() {
 print '
  <form method="post" enctype="multipart/form-data" name="frmUploadFile" action="' . $_SERVER['PHP_SELF'] . '">

  <p><input type="text" name="strDesc" size="20" maxlength="50" />
        file Description:</p>
  <p><input type="file" name="fileUpload" size="20" />
  Choose a file</p>
        <input type="submit" value="Upload this file" name="Submit" /></p>
  </form>

 </FORM> ';

}
?>
</form>
</BODY>
</HTML>

Patrick Roane
Web design and development
www.franklin-band.com
Fox River Grove, Il.