Question

I have an image file which is stored onto database as a blob (shown in the code). Once resized to 80*80(thumbnail) I need to store it onto some other database. I have resized and saved it as a file but I couldn’t store the resized image onto database. How can I achieve this?

//resize image and save
include('MyImage.php');
$image = new MyImage();
$image->load($tmpName);
$image->resize(80,80);
$image->save('thumbnail.jpg');


//storing original image onto database
if(isset($_POST['upload']) && $_FILES['userfile']['size'] > 0)
{
 $fileName = $_FILES['userfile']['name'];
 $tmpName  = $_FILES['userfile']['tmp_name'];
 $fileSize = $_FILES['userfile']['size'];
 $fileType = $_FILES['userfile']['type'];

 $fp      = fopen($tmpName, 'r');
 $content = fread($fp, filesize($tmpName));
 $content = addslashes($content);
 fclose($fp);

 if(!get_magic_quotes_gpc())
  {
    $fileName = addslashes($fileName);
  }

 $query = "INSERT INTO image_tbl (name, size, type, content )".
           "VALUES ('$fileName', '$fileSize', '$fileType', '$content')";
 mysql_query($query) or die('Error, query failed'); 
} 

Answer 1

The direct question to your answer is

//This goes after the frist block, after "$image->save('thumbnail.jpg');"

$fileSize=filesize('thumbnail.jpg')
$fp      = fopen('thumbnail.jpg', 'rb');
$content = fread($fp, $fileSize);
$content = addslashes($content);
fclose($fp);

$query = "INSERT INTO image_tbl (name, size, type, content )".
           "VALUES ('thumbnail.jpg', '$fileSize', 'image/jpeg', '$content')";
mysql_query($query) or die('Error, query failed'); 

You might recognize some elements of that code 🙂

But believe me, you do not want this:

• Storing BLOBs in the DB, that the DB doesn’t understand is a bad idea
• using strings and addslashes to achieve it, is very close to the worst case possible: You read the image into a string consisting of ca 50% unprintables, backslash it, transport it to the DB, where it is unbackslashed and parsed. Use prepared statements with parameters (if you really want to save the image in the DB)