current community

your communities

more stack exchange communities

Stack Exchange
tour help
stack overflow careers
Take the 2-minute tour ×
Stack Overflow is a question and answer site for professional and enthusiast programmers. It's 100% free.
up vote 1 down vote favorite

I have a basic username & password form which also allows you to upload an image with it. There's a create button, which takes the user to uploader.php which both uploads the image and inputs the username & password into the database.

Within the form tag:

< form enctype="multipart/form-data" method="POST" action="uploader.php?uploader=avatar&username=< ?php echo $_POST['username']; ?>" >

The problem:

The username won't post, nor any other posts for that matter. All fields are inside the form. I have checked PHP file upload form cannot submit a POST variable? and within php.ini post_max_size = 8M, and upload_max_filesize = 2M

share|improve this question
    
Its in the url not in the post data –  Musa Aug 21 '12 at 3:05
    
What are you referring to? –  Justin Aug 21 '12 at 3:09
    
username is in the url –  Musa Aug 21 '12 at 3:10
    
That's the name of the username input field –  Justin Aug 21 '12 at 3:11
    
Are you trying to submit a username and password at the same time as uploading a file? –  staticsan Aug 21 '12 at 3:20

2 Answers 2

up vote 2 down vote

Use <input type="hidden"/> to post username and other info.

<form enctype="multipart/form-data" method="POST" action="uploader.php">
    <input type="hidden" name="uploader" value="avatar"/>
    <input type="hidden" name="username" value="<?php echo $_POST['username']; ?>" />
    ...
</form>

Sample.php

<form enctype="multipart/form-data" method="POST" action="uploader.php">
  <br/>Username : <input type="text" name="username"/>
  <br/>Password : <input type="password" name="password"/>
    <input type="hidden" name="uploader" value="avatar"/>
   <br/>File : <input type="file" name="file"/>
   <br/><input type="submit"/>
</form>

uploader.php

<?php
  print_r($_POST)  // debug  $_POST
  print_r($_FILES) // file

  //OR
  echo $_POST["username"];
  $file=$_FILES["file"];
  print_r(file);
?>
share|improve this answer
    
But the password field input type needs to be "password" (this also needs to be posted I should have mentioned) –  Justin Aug 21 '12 at 3:07
    
It gets encypted and posted to the uploader.php file, which then inserts it into the database (I'm guessing this is an insecure approach) –  Justin Aug 21 '12 at 3:10
    
What do you mean by embed it with the hidden field? I'm not sure how else the password can get transferred to the uploader.php file without posting it in the URL –  Justin Aug 21 '12 at 3:13
    
Also - with making the input type hidden, this subsequently hides the field for the user to insert the username –  Justin Aug 21 '12 at 3:16
    
Sorry! what I understood from your post is that you wanted to pass username and uploader values (which are already available) to the request but if you wish to take input from the user then choose <input type='text or password'/>. –  AVD Aug 21 '12 at 3:21
up vote 1 down vote

It sounds like you want to submit the username and password and upload a file all in the one submit.

If this is what you want, you need something like the following:

<form enctype="multipart/form-data" method="POST" action="uploader.php">
<input type="text" name="username" value="" />
<input type="password" name="password" value="" />
<input type="file" name="uploaded" />
...
</form>

The username and password will be available in $_POST[] and the file will be present in $_FILES[].

share|improve this answer
    
This still doesn't "POST" the username, strangely. –  Justin Aug 21 '12 at 3:56
    
So what do print_r($_POST);, print_r($_GET); and print_r($_REQUEST); show? The output of those should go a long way toward helping you figure what's missing. –  staticsan Aug 22 '12 at 1:57
    
Oh okay, it works as I used POST on the uploader.php... but I'm confused, I thought I should have to post the username on the original PHP page and then have to GET it on uploader.php? –  Justin Aug 22 '12 at 16:18
    
The superglobal $_POST[] is the contents of all variables sent to the server in a HTTP POST request. You specify whether a form makes a GET request or a POST request by setting the method parameter to the <form> element. (But remember you can only upload a file in a POST.) –  staticsan Aug 23 '12 at 1:14
    
Also, have you looked at php.net/manual/en/language.variables.external.php and other PHP documentation? –  staticsan Aug 23 '12 at 1:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.