PHP form uploading multiple image files

Question

I'm trying to create a site where the user has to upload at least a profile picture, and 4 additional yet optional pictures. I'm struggling to wrap my head around the logic required, so can someone please point me in a general direction. Here's the form:

<form id=userform action="updatepictures.php" method=post enctype="multipart/form-data">
                <div id="slogan">Upload A Profile Picture*</div>
                <center><input type=file name=profilepicture></center>
                <div id="slogan">Upload Up To Four Additional Pictures</div>
                <center><input type=file name=pic1></center>
                <br>
                <center><input type=file name=pic2></center>
                <br>
                <center><input type=file name=pic3></center>
                <br>
                <center><input type=file name=pic4></center>
                <center><input style="margin-top: 20px;" type="submit" value="Update" class="butt" name="upload"></center>
            </form>

And Here's the PHP script for it:

<?php

include ('connect.php');

session_start();

$target_dir = "gallery/";
$target_file = $target_dir . basename($_FILES["profilepicture"]["name"]);
$imageFileType = pathinfo($target_file,PATHINFO_EXTENSION);
$target_file = $target_dir . bin2hex(openssl_random_pseudo_bytes(16)) . "." . $imageFileType;

if (isset($_POST["upload"]))
{
    $check = getimagesize($_FILES["profilepicture"]["tmp_name"]);
    if($check == false)
    {
        header("refresh:0;url=profile.php?error=filetype");
        return ;
    }
}

if ($_FILES["profilepicture"]["size"] > 1000000)
{
    header("refresh:0;url=profile.php?error=size");
    return ;
}

if ($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg"
&& $imageFileType != "gif" )
{
    header("refresh:0;url=profile.php?error=unsupported");
    return ;
}
if (move_uploaded_file($_FILES["profilepicture"]["tmp_name"], $target_file))
{
    //Push Images To Database
    $conn = Connect();
    $pfp = $conn->prepare("INSERT INTO `images` (`id`, `user`, `profile`, `pic1`, `pic2`, `pic3`, `pic4`) VALUES (NULL, :email, :pfp, '', '', '', '')");
    $pfp->bindParam(':email', $_SESSION['email']);
    $pfp->bindParam(':pfp', $target_file);
    $pfp->execute();
    $confirmed = $conn->prepare("UPDATE `users` SET `confirmed` = '1' WHERE `users`.`email` = :email");
    $confirmed->bindParam(':email', $_SESSION['email']);
    $confirmed->execute();
    header("refresh:0;url=home.php");
}
else
{
    header("refresh:0;url=profile.php?error=unknown");
}


?>

Right now, the script uploads the profile picture, but how do I get it to check for the other files and upload them too, even though they're optional?

define a function where only upload process are define , and check if file is exist then call the function with file details and store location — Md Hasibur Rahaman, Nov 01 '16 at 07:19
You might also want to check my answer to [Full Secure Image Upload Script](http://stackoverflow.com/questions/38509334/full-secure-image-upload-script/38712921#38712921) as your script is still open to a few security vulnerabilities. — icecub, Nov 01 '16 at 07:28
@icecub Thanks. I'll have a look as soons as I get the page to do the basic stuff at least. Our school's deadlines are a bit too soon to go into too much details, but it's worth a read. — NodziGames, Nov 01 '16 at 07:36

score 0 · Accepted Answer · answered Nov 01 '16 at 07:35

0

Thanks to Hasibur Rahaman for the solution. I changed it into a function and called it when $_FILES['image name'] is not empty.

answered Nov 01 '16 at 07:35

NodziGames

395
3
17

PHP form uploading multiple image files

1 Answers1

Linked