File Upload Problem

Original - php Code <?php // the following values are used to verify_uploaded_file() // as the types and sizes that are allowed to be uploaded. $UPLOAD_TYPES['JPG'] == 1; //Allow .jpg $UPLOAD_TYPES['JPEG'] == 1; $UPLOAD_SIZES['max'] == 100000; $UPLOAD_SIZES['min'] == 0; echo 'File: ' . $HTTP_POST_FILES['upload_file']['name'] . '<br>' 'Size: ' . $HTTP_POST_FILES['upload_file']['size'] . '<br><br>'; //verify the files size and type $intResult = verify_uploaded_file( $HTTP_POST_FILES['upload_file']['name'], $HTTP_POST_FILES['upload_file']['size']); if($intResult == 1) { echo $HTTP_POST_FILES['uploaded_file']['name'] . ' is acceptable. '; } else { echo $HTTP_POST_FILES['uploaded_file']['name'] . ' is unacceptable. '; if($intResult == -1) { echo 'Reason: File Size out of Allowed Range.'; } elseif($intResult == -2) { echo 'Reason: File type not allowed'; } } function verify_uploaded_file($strName, $intSize) /* PRE: $strName and $intSize are attributes taken from the uploaded files information. Also, the global variables $UPLOAD_SIZES and $UPLOAD_TYPES should be defined prior to calling this function PST: Returns 1 if the file is acceptable -1 if the files size is out of range -2 if the files type is unacceptable */ { //check the file size if($intSize < $GLOBALS['UPLOAD_SIZES']['min'] || $intSize > $GLOBALS['UPLOAD_SIZES']['max']) { return -1; } //check the file type $arrSegments = split('[.]', $strName); //may contain multiple dots $strExtension = $arrSegments[count($arrSegments) - 1]; if($GLOBALS['UPLOAD_TYPES'][strtoupper($strExtension)] != 1) { return -2; //file type not defined / allowed } //all tests have passed, the file is valid return 1; } //define mysql login settings $host = 'localhost'; $user = 'username'; $pass = '******'; $db = 'database'; //this is the file that will be inserted into the database $MY_FILE = $HTTP_POST_FILES['upload_file']; //open the file and store its contents in $file_contents $file = fopen($MY_FILE, 'r'); $file_contents = fread($file); fclose($file); // we need to escape strange chars that might appear in $file_contents $file_contents = addslashes($file_contents); //put the file in the database mysql_connect($host, $user, $pass) or die("Couldnt connect to database"); mysql_select_db($db) or die("couldnt select database"); mysql_query("INSERT INTO members SET avatar = '$file_contents'") or die( mysql_error() ); mysql_close(); ?>

 
<?php
// the following values are used to verify_uploaded_file()
// as the types and sizes that are allowed to be uploaded.
$UPLOAD_TYPES['JPG'] == 1; //Allow .jpg
$UPLOAD_TYPES['JPEG'] == 1;
$UPLOAD_SIZES['max'] == 100000;
$UPLOAD_SIZES['min'] == 0;
 
echo 'File: ' . $HTTP_POST_FILES['upload_file']['name'] .
     '<br>'
     'Size: ' . $HTTP_POST_FILES['upload_file']['size'] .
     '<br><br>';
     
//verify the files size and type
$intResult = verify_uploaded_file(
                    $HTTP_POST_FILES['upload_file']['name'], 
                    $HTTP_POST_FILES['upload_file']['size']);
                    
if($intResult == 1)
{
    echo $HTTP_POST_FILES['uploaded_file']['name'] .
            ' is acceptable. ';
}
else
{
    echo $HTTP_POST_FILES['uploaded_file']['name'] .
            ' is unacceptable. ';
    if($intResult == -1)
    {
        echo 'Reason: File Size out of Allowed Range.';
    }
    elseif($intResult == -2)
    {
        echo 'Reason: File type not allowed';
    }
}
    
function verify_uploaded_file($strName, $intSize)
/*
PRE: $strName and $intSize are attributes taken from
the uploaded files information.
Also, the global variables $UPLOAD_SIZES and 
$UPLOAD_TYPES should be defined prior to calling this function
PST: Returns
    1 if the file is acceptable
    -1 if the files size is out of range
    -2 if the files type is unacceptable
*/
{
    //check the file size
    if($intSize < $GLOBALS['UPLOAD_SIZES']['min'] ||
        $intSize > $GLOBALS['UPLOAD_SIZES']['max'])
    {
        return -1;
    }
    
    //check the file type
    $arrSegments = split('[.]', $strName); //may contain multiple dots
    $strExtension = $arrSegments[count($arrSegments) - 1];
    
    if($GLOBALS['UPLOAD_TYPES'][strtoupper($strExtension)] != 1)
    {
        return -2; //file type not defined / allowed
    }
    
    //all tests have passed, the file is valid
    return 1;
}
 
 
//define mysql login settings
$host = 'localhost';
$user = 'username';
$pass = '******';
$db = 'database';
 
//this is the file that will be inserted into the database
$MY_FILE = $HTTP_POST_FILES['upload_file'];
 
//open the file and store its contents in $file_contents
$file = fopen($MY_FILE, 'r');
$file_contents = fread($file);
fclose($file);
 
// we need to escape strange chars that might appear in $file_contents
$file_contents = addslashes($file_contents);
 
//put the file in the database
mysql_connect($host, $user, $pass)
    or die("Couldnt connect to database");
mysql_select_db($db)
    or die("couldnt select database");
mysql_query("INSERT INTO members SET avatar = '$file_contents'")
    or die( mysql_error() );
mysql_close();
 
 
?> 

Original - php Code 'Size: ' . $HTTP_POST_FILES['upload_file']['size'] .

 'Size: ' . $HTTP_POST_FILES['upload_file']['size'] . 

Original - php Code Warning: fopen("Array", "r") - No such file or directory in /home/sites/site93/web/testing_arena/upload2.php on line 21 Warning: Wrong parameter count for fread() in /home/sites/site93/web/testing_arena/upload2.php on line 22 Warning: Supplied argument is not a valid File-Handle resource in /home/sites/site93/web/testing_arena/upload2.php on line 23 //which is: $file = fopen($MY_FILE, 'r'); $file_contents = fread($file); fclose($file);

 
Warning: fopen("Array", "r") - No such file or directory in /home/sites/site93/web/testing_arena/upload2.php on line 21
 
Warning: Wrong parameter count for fread() in /home/sites/site93/web/testing_arena/upload2.php on line 22
 
Warning: Supplied argument is not a valid File-Handle resource in /home/sites/site93/web/testing_arena/upload2.php on line 23
 
//which is:
$file = fopen($MY_FILE, 'r');
$file_contents = fread($file);
fclose($file);