StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POusing a form variable with a file upload script
text
Body
copied!<p>I am using this form as a file upload form(as part of a larger php script, $pk is sanitized in the actual thing):</p> <pre><code><?php if (isset($_GET["pk"])) { $pk = $_GET["pk"];} echo '<form action="up.php" method="post" enctype="multipart/form-data"> <label for="file">Filename:</label> <input type="file" name="file" id="file" /> <input type="hidden" name="pk" value="$pk"> <br /> <input type="submit" name="submit" value="Submit" /> </form>'; ?> </code></pre> <p>I am using the following(extremely trimmed) code to handle the upload. Any syntax errors are a result of the tabifier I used.</p> <pre><code><?php if (isset($_GET["pk"])) { $pk = $_GET["pk"]; } $con = mysqli_connect("localhost","x","x", "x"); echo "Upload: " . $_FILES["file"]["name"] . "<br />"; echo "Type: " . $_FILES["file"]["type"] . "<br />"; echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />"; echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />"; move_uploaded_file($_FILES["file"]["tmp_name"], "./" . $_FILES["file"]["name"]); echo "Stored in: " . "./" . $_FILES["file"]["name"]; $fileQuery = "INSERT INTO FILES VALUES (?, ?)"; if ($fileInsert = $con->prepare($fileQuery)) { $fileInsert->bind_param("ss", $pk, $_FILES["file"]["name"]); $fileInsert->execute(); $fileInsert->close(); } else { print_r($con->error); } ?> </code></pre> <p>What I would like to know, is how do I access $pk. Is it already passed to the handling code with the form?</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload