Question

Salutations, I am having problems allowing user’s(admin) the ability to upload files/images to the server. Any help will be much appreciated.

Here is the part of my code where I am processing the file:

if ((($_FILES["image"]["type"] == "image/gif")
    || ($_FILES["image"]["type"] == "image/jpeg")
    || ($_FILES["image"]["type"] == "image/jpg")
    || ($_FILES["image"]["type"] == "image/pjpeg"))
    && ($_FILES["image"]["size"] < 20000))
    {
        if($_FILES['image']['error'] > 0)
        {
            header('Location: addAd.php?message='.$_FILES['image']['error'].'!');
        }
        else
        {
            if(file_exists('images/'.$_FILES['image']['name']))
            {
                header('Location: addAd.php?message=file already exists!');
            }
            else
            {
                move_uploaded_file($_FILES['image']['temp_name'],'images/'.$_FILES['image']['name']);
                $fileName = $_FILES['image']['name'];
            }
        }
    }
    else
    {
        header('Location: addAd.php?message=Invalid file!');
    }

And here is where I create the form:

echo '<form method="POST" action="" enctype="multipart/form-data">';
    for($i=1; $i<mysql_num_fields($rs); $i++)
    {
        $rsmd = mysql_fetch_field($rs,$i);
        if($rsmd->name == 'description')
        {
            echo '<textarea name="'.$rsmd->name.'" cols="40" rows="10"></textarea><br />';
        }
        else if($rsmd->name == 'image')
        {
            echo $rsmd->name.'<input type="file" name="'.$rsmd->name.'" /><br />';
        }
        else
        {
            echo $rsmd->name.'<input type="text" name="'.$rsmd->name.'" /><br />';
        }
    }
    echo '<input type="submit" value="submit" name="submit">';
    echo '</form>';

Answer 1

$_FILES['image']['temp_name'] should be: $_FILES['image']['tmp_name'] :

move_uploaded_file($_FILES['image']['tmp_name'],'images/'.$_FILES['image']['name']);