NOOB needs help with upload file

Posted on 16th Feb 2014 by admin

The intent of this form is to create a folder for a client and upload an image into another folder 'imagesClients'. The form works as follows:
Username: selected from drop down menu.
Folder: Slide shows will be FTP to folder. Repeat clients may have more than one folder. Uploaded images will not go into this folder.
Image: Selected from window
Active: Either yes or no

mkdir works without any problems.

Here are my issues:
1. image doesn't upload to 'imagesClients' folder.
2. image name isn't uploading to the db.
3. how would I add a file validation to 'if(!$user || !$folder || !$active)'. I tried creating a variable for 'file' but received an undefined error.
3. I'm self taught through a dummies book, am I doing this right or is there a better method?

Thanks in advance!!

slideshow_new.php
Code: <?php
session_start();
error_reporting(E_ALL);
require_once('site_fns.php');
include("connect.php");
do_html_header('New Client');
do_menu_main2('');
check_login();
do_mainadmin_menu('');

if(!$_POST['submit']) // 'submit' hasn't been clicked so output html.
{
//set up form options to select a username
$sql = mysql_query("SELECT DISTINCT username FROM Client");
while($row = mysql_fetch_assoc($sql))
{
$dd .= "<option value='{$row['username']}'>{$row['username']}</option>";
}
?>
<form enctype="multipart/form-data" action="slideshow_new.php" method="post">
<fieldset>
<legend>Setup Slideshow</legend>
<ol>
<li>Select: <select name="username" style="width: 222px;">
<? echo $dd; ?></select></li>
<li>Folder Name: <input type="text" name="foldername" /></li>
<li><input type="hidden" name="MAX_FILE_SIZE" valude="10000000" />
Client Image: <input type="file" name="file" id="file"/></li>
<li>Active Image: <select name="active">
<option value="yes" selected="selected">Yes</option>
<option value="no">No</option></select></li>
<input type="submit" name="submit" value="Add Slideshow" />
</ol>
</fieldset>
</form>
<?php
}
else
{
$clientusername = protect($_POST['username']);
$folder = protect($_POST['foldername']);
$active = protect($_POST['active']);

$errors = array();

if(!$user || !$folder || !$active)
{
$errors[] = "You did not fill out the required fields.";
}

//Ensure client folder doesn't exist. Creates client folder
$sql = "SELECT * FROM Slideshow WHERE (foldername) = ('$folder')";
$query = mysql_query($sql) or die(mysql_error());

if(mysql_num_rows($query) > 0)
{
$errors[] = "Folder name is already in use, please try another";
}
else
{
mkdir("/home/brittao1/public_html/Clients/$folder", 0700);
}

//This function will upload your file
function upload()
{
//Collect all info into variables
$file = $_FILES['file']['name'];
$type = $_FILES['file']['type'];
$temp = $_FILES["file"]["tmp_name"];
$imageSize = getimagesize($temp);

//If file size is bigger than 1mb display error
if($imageSize > 1000000)
{
$errors[] = "File size must be less than 1MB.";
}

//Check allowed file types
if (preg_match('/image/(jpg|jpeg|gif|png)/', $imageSize['mime']))
{
if (file_exists("/home/brittao1/public_html/imagesClients/$file"))
{
$errors[] = "$file image already exists.";
}
else
{
//If everything is good then let's upload
move_uploaded_file($temp, "/home/brittao1/public_html/imagesClients/$file");
}
else
{
$errors[] = "File type must be .jpg, .jpeg, .gif, or .png.";
}
}
}
if(count($errors) > 0)
{
echo "<h1>The following errors occured with your slideshow.</h1>";
echo "<div class='error'>";
foreach($errors AS $error)
{
echo $error . "<br />";
}
echo "</div>";
echo "<a href="javascript:history.go(-1)">Try again</a>";
//we use javascript to go back rather than reloading the page
// so the user doesn't have to type in all that info again.
}
else
{
//upload to database
$sql = "INSERT INTO Slideshow (username, foldername, active, image_name)
VALUES ('$clientusername','$folder', '$active', '$file')";

$query = mysql_query($sql) or die(mysql_error());
echo "</ br><div class=bodyText>Slideshow folders prepared for $clientusername.<br />
FTP lightroom slideshow to $folder folder.</div>";
}
}

do_html_footer();
?>