How to store photo upload in a PHP session?

Question

I've built this webform wizard, consisting of several PHP pages. In this several pages users can fill in the form and the data gets temporarily stored in a session and at the last page the sessions are used to store all the data in the MYSQL database. Everything works fine with the exception of the uploaded file. Here is my code:

HTML: wizard_page2

<form name="registratieformulier" method="post" enctype="multipart/form-data" action="sw3.php">

    <tr><td>Foto winkel uploaden: </td><td><input type="file" name="uploadfoto"/></td></tr><br /><br />

      <tr><td><strong>Omschrijving van winkel:</strong></td>                    </tr><br />

       <tr><textarea cols="50" rows="7" name="omschrijvingwinkel"></textarea></tr>
       <input name="pkbedrijven" value="<?php echo($pkbedrijven); ?>" type="hidden" />
    <input type="submit" name="stuurfoto" value="Verzenden" />

</form>

PHP: wizard_last_page

    $_FILES['uploadfoto']['name']       = $_SESSION["naamfoto"];
    $_FILES['uploadfoto']['tmp_name']   = $_SESSION["tijdelijk"];

    $bn =   $_SESSION["wn"];

     $target_path = "../../winkels/$bn/";

      $target_path = $target_path . basename( $_FILES['uploadfoto']['name']);


    move_uploaded_file($_FILES['uploadfoto']['tmp_name'], $target_path)or die("There was an error uploading the file, please try again!");
     $foto_path  = "http://mywebsite.nl/winkels/$bn/".basename($_FILES['uploadfoto']['name']);


   $omschrijving   = $_SESSION["omschrijving"];

   $add = "UPDATE winkelprofiel SET winkelomschrijving='$omschrijving', winkelfoto='$foto_path' WHERE fkBedrijvenID=$pkbedrijven ";
   $query_upload = mysql_query($add) or die("De winkelfoto en omschrijving konden niet worden opgeslagen");

Answer 1

I disagree with the accepted answer. There is a way to store all the images in the session array variable. You can use the "file_get_contents" function for storing the image. Have a look at this:

  $_SESSION['imgArrayFile'][] = $_FILES['file']; //Your file informations
  $_SESSION['imgArrayName'][] = $_POST["ImgNewNamePlacowki"]; //new name for img
  $_SESSION['ImgArrayAlt'][] = $_POST["ImgAltPlacowki"]; // alt tags if you use them
  $_SESSION['obj_image_session'][] = file_get_contents($_FILES['file']['tmp_name']); 
  //above "file_get_contents" function - store image as a long string.

Regardless of what other think about using it for this purpose it can do the job for you. There are several issues with storing large amounts of data in a session but if you images are small enough and you are aware of your settings limitation, then you will be just fine.

Save your file with

$file= $destination."/".$filename; //images/new.jpg
$fp=fopen($file,"w");
fwrite($fp,$_SESSION['obj_image_session'][$index]);

EXAMPLE FROM MY (WORKING) PROJECT:

<?php
//$galery_img_folder = "your/new/image/destination";

foreach($_SESSION['imgArrayFile'] as $index => $name){
  if($_SESSION['imgArrayName'][$index]!="" 
  && $_SESSION['ImgArrayAlt'][$index]!=""
  && $_SESSION['obj_image_session'][$index]!=""
  ){

    $allowedExts = array("gif", "jpeg", "jpg", "png");
    $temp = explode(".", $_SESSION['imgArrayFile'][$index]["name"]);
    $extension = end($temp);
    if ((($_SESSION['imgArrayFile'][$index]["type"] == "image/gif")
    || ($_SESSION['imgArrayFile'][$index]["type"] == "image/jpeg")
    || ($_SESSION['imgArrayFile'][$index]["type"] == "image/jpg")
    || ($_SESSION['imgArrayFile'][$index]["type"] == "image/pjpeg")
    || ($_SESSION['imgArrayFile'][$index]["type"] == "image/x-png")
    || ($_SESSION['imgArrayFile'][$index]["type"] == "image/png"))
    && ($_SESSION['imgArrayFile'][$index]["size"] < 104857600)
    && in_array($extension, $allowedExts))
      {
          if(isset($_SESSION['imgArrayName'][$index]) && $_SESSION['imgArrayName'][$index]!=""){ 
          $rename = $_SESSION['imgArrayName'][$index];
          $rename = $rename.".".end($temp);
        }

      if ($_SESSION['imgArrayFile'][$index]["error"] > 0)
        {
        echo "Return Error Code: " . $_SESSION['imgArrayFile'][$index]["error"] . "<br>";
        }
      else
        {
        $size = display_filesize($_SESSION['imgArrayFile'][$index]["size"]);
        echo "Upload: " . $_SESSION['imgArrayFile'][$index]["name"] . "<br>";
        echo "Type: " . $_SESSION['imgArrayFile'][$index]["type"] . "<br>";
        echo "Size: " . ($size) . "<br>";
        echo "Temp file: " . $_SESSION['imgArrayFile'][$index]["tmp_name"] . "<br>";

        if (file_exists($galery_img_folder."/".$rename))
          {
          $error[] = ''.$rename.' <span class="error" id="error"> this name exsists </span>';
          }
        else
          {
          $_FILES["file"]["tmp_name"]=$_SESSION['imgArrayFile'][$index]["tmp_name"];
          move_uploaded_file($_FILES["file"]["tmp_name"], $galery_img_folder."/".$rename);
          //now make use of the file_get_content variables
          $file= $galery_img_folder."/".$rename;
          $fp=fopen($file,"w");
          fwrite($fp,$_SESSION['obj_image_session'][$index]);
        }
          }
        }
      }
    else
      {
      $error[] = '<span class="error" id="error"> Niewłaściwy plik </span>';
      $maxsixe = display_filesize(104857600);
      echo "Size: " . ($maxsixe) . "<br>";
      }
    }
  }//end foreach ! ! ! 
}//end dodawanie zdjecia
?>

Of course you will have to make some small modifications to make it work with your project, but my point was to show you that it's possible.

Have a great day and happy coding !

Answer 2

Well, you can upload the file in one temporary location first. Then on the last page, once you submit the form, you can transfer the file to the desired location and then delete the temporary one.

$_SESSION['file'] = $_FILES["file"]["name"];

if (file_exists("uploads/" . $_FILES["file"]["name"]))
      {
      echo $_FILES["file"]["name"] . " already exists. ";
      }
    else
      {
      move_uploaded_file($_FILES["file"]["tmp_name"],"uploads/temp/" . $_FILES["file"]["name"]);
      };


//This for the last page.
$file = file_get_contents("uploads/temp/".$_SESSION['file']);
file_put_contents("uploads/".$_SESSION['file'], $file);

Answer 3

I think that the problem is, the file located at $_FILES['uploadfoto']['tmp_name'] will only be available when it is uploaded. Even you store the value in session, the file won't be there when you come to wizard_last_page. You need to handle uploaded files right away in the POST request.

So you need to move the file to $target_path or any certain temporary place when it's uploaded, then store the $target_path in the session so you can access to the file later on wizard_last_page.

Answer 4

The $_FILES array only holds information about the file that has been uploaded in this request. If you do not save that file elsewhere within the same request, it will be removed by PHP at the end of the request. You cannot simply save $_FILES['uploadfoto']['tmp_name'] into the session and expect the file to still be there later, because it won't be. There's also no point in assigning the values in $_SESSION back into $_FILES, it won't bring the file back.

What you need to do:

1. if the upload was successful, move $_FILES['uploadfoto']['tmp_name'] somewhere else immediately
2. save the location you have moved it to into $_SESSION
3. do something with that file in $_SESSION at the end of your multi-page process (no need for $_FILES anymore at all)
4. have some mechanism in place to remove old uploaded files, in case the user abandons the session and the file never gets used