My Little Scripts - database-file-upload-download.php

Scripts.com - Get the best scripts NOW!
HotScripts.com - Over 10 web rings.
more links...

Index News Samples Downloads E-Mail me Forum Sign Up

DATABASE-FILE-UPLOAD-DOWNLOAD.PHP

Have any of your database driven sites been rendered useless because of of lost images? Keeping them in the database is a solution to that problem. Downloads and images are often part of a website's content: If a website's content is to be derived from a database, then so should these. Although it does double the site's disk space requirements, such an approach helps ensure a truer independence of the front-end and business logic of a site from the back-end.

db_upload_file() stores a file in a database table. Make sure that the column data type is big enough for the files you will be storing. db_download_file() retrieves a file from the database and places it in the same path as the script calling it, and returns the relative URL. If the file does not exist in the database, it returns an empty string.

<?
//Uploads and stores a file in a database.
function db_upload_file($input_name, $database_name, $table_name, $file_bytes_col, $file_name_col)
         {
         //$input_name is the name of the input tag used to upload the file.
         global $HTTP_POST_FILES;

         if(isset($HTTP_POST_FILES) && is_uploaded_file($HTTP_POST_FILES[$input_name]["tmp_name"]))
           {
           $file_handle = fopen($HTTP_POST_FILES[$input_name]["tmp_name"], "rb");
           $file_name = $HTTP_POST_FILES[$input_name]["name"];
           $file_bytes = addslashes(fread($file_handle, filesize($HTTP_POST_FILES[$input_name]["tmp_name"])));
           unlink($HTTP_POST_FILES[$input_name]["tmp_name"]);

           mysql_select_db($database_name);

           //Keeps the file names unique.
           $select = "select " . $file_name_col . " from " . $table_name .
                     " where " . $file_name_col . " = '" . $file_name . "'";
           $record_of_stored_files = mysql_query($select);

           if(mysql_num_rows($record_of_stored_files) == 0)
             {
             $insert = "insert into " . $table_name .
                       "(" . $file_bytes_col . ", " . $file_name_col . ") values " .
                       "('" . $file_bytes . "', '" . $file_name . "')";

             mysql_query($insert);
             }
           else
             {
             $update = "update " . $table_name .
                       " set " .  $file_bytes_col . " = '" . $file_bytes . "' " .
                       " where " . $file_name_col . " = '" . $file_name . "'";

             mysql_query($update);
             }
           }
         }

//Makes a stored file available for download.
function db_download_file($file_name, $database_name, $table_name, $file_bytes_col, $file_name_col)
         {
         $return_value = "";

         mysql_select_db($database_name);

         $select = "select " . $file_bytes_col . " from " . $table_name .
                   " where " . $file_name_col . " = '" . $file_name . "'";

         $file_records = mysql_query($select);

         if($file_record = mysql_fetch_array($file_records))
           {
           $file_handle = fopen("./" . $file_name, "wb");
           $file_bytes = $file_record[0];
           fwrite($file_handle, $file_bytes, strlen($file_bytes));
           $return_value = "./" . $file_name;
           }

         return($return_value);
         }
?>