while uploading a image using php and mysql: Warning: file_get_contents(): Filename cannot be empty

Question

when i am trying to upload a image to photos folder i am having this type of warning msg i dont know what to.. This is my php file

if (!isset($_FILES['image']['tmp_name'])) {
    echo "";
    }else{
    $file=$_FILES['image']['tmp_name'];
    $image= mysql_real_escape_string(addslashes(file_get_contents($_FILES['image']['tmp_name'])));
    $image_name= addslashes($_FILES['image']['name']);

            move_uploaded_file($_FILES["image"]["tmp_name"],"photos/" . $_FILES["image"]["name"]);

            $location="photos/" . $_FILES["image"]["name"];

            $save=mysql_query("insert into add values('$location')") or die("can not insert");
            exit();                 
    }

This is my html code

<form method="POST" action='ap.php' enctype="multipart/form-data">
<input name="image" id="image" type="file" />
<input type='submit' name='Add' value='Add'  />
</form>

Why $image= mysql_real_escape_string(addslashes(file_get_contents($_FILES['image']['tmp_name']))); is required??You are not using $image anywhere.! — Sougata Bose
– Sougata Bose, Commented Apr 15, 2015 at 5:19

Iffi · Accepted Answer · 2015-04-15 05:20:57Z

1

No need the following lines:

$image= mysql_real_escape_string(addslashes(file_get_contents($_FILES['image']['tmp_name'])));
$image_name= addslashes($_FILES['image']['name']);

Just removed it and test it will work. You are checking the first if condition its enough.

answered Apr 15, 2015 at 5:20

Iffi

5882 gold badges7 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Yuva Raj · Accepted Answer · 2015-04-15 05:26:45Z

You don't need to escape thing. Just do like,

if (!isset($_FILES['image']['tmp_name'])) {
    echo "Image not selected ";
  }

else
{
    $file=$_FILES['image']['tmp_name']; // temporary name
    $image_name= $_FILES['image']['name']; // original file name

     move_uploaded_file($_FILES["image"]["tmp_name"],"photos/" . $_FILES["image"]["name"]);

     $location="photos/" . $_FILES["image"]["name"];
     $query = "Write your query here...";
     $save=mysqli_query($connection, $query);
     if($save)
      {
        // success...do whatever you want
       }
     else
      {
         // executes when save fails
       }      
    }

WARNING :

mysql_ is deprecated. Migrate to mysqli_ or PDO. Your code is vulnerable to SQL Injection.

Atulk · Accepted Answer · 2015-04-15 05:30:29Z

1

Your code working fine, Please check for permission as well for 'photos' must be writable. You can also remove following line as it's have no effect.

$image= mysql_real_escape_string(addslashes(file_get_contents($_FILES['image']['tmp_name'])));

Please paste full code as well may be some issue with your connection string or other code.

answered Apr 15, 2015 at 5:30

Atulk

231 silver badge8 bronze badges

1 Comment

Shaiful Islam Over a year ago

Please do not write comment as answer

Sougata Bose · Accepted Answer · 2015-04-15 05:21:12Z

0

No need of escaping the file name & tmp_name. Simply do -

move_uploaded_file($_FILES["image"]["tmp_name"],"photos/" . $_FILES["image"]["name"]);

$location="photos/" . $_FILES["image"]["name"];

$save=mysql_query("insert into add values('$location')") or die("can not insert");
exit();

answered Apr 15, 2015 at 5:21

Sougata Bose

31.8k8 gold badges52 silver badges89 bronze badges

Comments

sreethar raja · Accepted Answer · 2015-04-15 07:10:25Z

0

After removing these two lines. It works fine

$image= mysql_real_escape_string(addslashes(file_get_contents($_FILES['image']['tmp_name'])));
$image_name= addslashes($_FILES['image']['name']);

answered Apr 15, 2015 at 7:10

sreethar raja

257 bronze badges

Collectives™ on Stack Overflow

while uploading a image using php and mysql: Warning: file_get_contents(): Filename cannot be empty

5 Answers 5

Comments

Comments

1 Comment

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

Comments

Comments

1 Comment

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related