Question

I am storing images name inside on MySQL database. Everytime I perform an upload, I have it return a link back with the image name attached which then I extract the image name and saved to the database. I have corrections to some critical flaws but I am still facing issues of having blank spaces/ duplicate names inserted into my database even though I have established checkpoints.

How can I avoid duplication/blank spaces of file names?

Is there a better approach in storing names in DB?

Location of image inside webserver:

http://www.example.com/imageupload/uploads/medium/50038dc14afb7.jpg

Link in the browser:

http://www.example.org/imageupload/index.php?i=50038dc14afb7.jpg

PHP

<?
    $images = retrieve_images();
    insert_images_into_database($images);

    function retrieve_images()
    {        
        $images = explode(',', $_POST['i']);
        return $images;
    }

    function insert_images_into_database($images)
    {
        if(!$images) //There were no images to return
            return false;        

        $db = dbConn::getConnection();

        foreach($images as $image)
        {
            $sql = "INSERT INTO `urlImage` (`image_name`) VALUES ( ? )";
            $prepared = $db->prepare($sql);
            $prepared->execute(array($image));
        }
    }

?>

Answer 1

First, the blank name issue can perharps be fixed by checking $_POST['i']:

if (!isset($_POST['i'])) {
    echo "No image to upload!";
    die();
}

Have you tried redirecting after uploading the image?

// When image is uploaded
header("Location: http://example.org/imageupload/index.php");
die();