保存在DB的同时

Question

我有一个基本的图片上传这是工作不错，但现在我需要将其保存在我的MySQL数据库3图像不是唯一的一个，我怎么能保存3个图像相同的形式用3个图像我的上传脚本？

我需要保存3个图像，因为是我第一个博客文章，我想显示3个图像预览滑块，是因为这一点，我需要保存3个图像相同的ID。

另一种认为，如何才能挽救一个或两个不上传脚本给我的错误，因为一个或两个，甚至是三个文件的上传是空的？

在这里，我告诉你我的上传脚本：

<?php 
    require_once("connection.php"); 
    require_once("settings.php"); 
    $alert = ""; 
    if(isset($_FILES['foto_ser1'])) { 
     $extension = pathinfo($_FILES['foto_ser1']['name']); 
     $extension = $extension["extension"]; 
     $allowed_paths = explode(", ", $allowed_ext); 
     $valid = 0; 
     for($i = 0; $i < count($allowed_paths); $i++) { 
      if ($allowed_paths[$i] == "$extension") { 
       $valid = 1; 
      } 
     } 
     if ($valid == 1 && $_FILES["foto_ser1"]["size"] <= $max_weight) { 
      if (file_exists("../assets/img/servicios/" . $_FILES["foto_ser1"]["name"])) { 
       $alert = '<p class="error">' . $_FILES["foto_ser1"]["name"] . ' El nombre del archivo ya existe!' . '</p>'; 
      } else { 
       move_uploaded_file($_FILES["foto_ser1"]["tmp_name"], "../assets/img/servicios/" . $_FILES["foto_ser1"]["name"]); 
       $save1 = $_FILES["foto_ser1"]["name"]; 
       $statement = $conn->prepare("INSERT INTO SERVICIOS (titulo, descripcion, categoria, foto_ser1, foto_ser2, foto_ser3) VALUES (?, ?, ?, ?, ?, ?)"); 
       if ($statement->execute(array($_POST['titulo'],$_POST['descripcion'],$_POST['categoria'],$save1,$save2,$save3))); 
       $dbSuccess = true; 
       $alert = '<p class="ok">' . ' Servicio agregado satisfactoriamente!' . '</p>'; 
       $dbh = null; 
      } 
     } else { 
      $alert = '<p class="error">' . ' Tipo de archivo inv&aacute;lido!' . '</p>'; 
     } 
    } 
?> 

形式page.php文件：

<form class="form-horizontal" id="servicios" name="data" method="post" enctype="multipart/form-data"> 
     <fieldset> 
      <?php echo $alert1; ?> 
      <div class="control-group"> 
       <label class="control-label col-md-4"><?php echo $translate->__('Title'); ?> :</label> 
       <div class="col-md-5"> 
        <input type="text" class="form-control" name="titulo" /> 
       </div> 
      </div> 
      <div class="control-group"> 
       <label class="control-label col-md-4"><?php echo $translate->__('Article info'); ?> :</label> 
       <div class="col-md-5"> 
        <textarea id="maxlength_textarea" class="form-control" maxlength="225" name="descripcion" /></textarea> 
       </div> 
      </div> 
      <div class="control-group"> 
       <label class="control-label col-md-4"><?php echo $translate->__('Article category'); ?> :</label> 
       <div class="col-md-5"> 
        <input type="text" class="form-control" name="categoria" /> 
       </div> 
      </div>     
      <div class="control-group"> 
       <label class="control-label col-md-4"><?php echo $translate->__('File to upload 1'); ?> :</label> 
       <div class="col-md-3"> 
        <input name="foto_ser1" type="file" /> 
       </div> 
      </div>     
      <div class="control-group"> 
       <label class="control-label col-md-4"><?php echo $translate->__('File to upload 2'); ?> :</label> 
       <div class="col-md-3"> 
        <input name="foto_ser2" type="file" /> 
       </div> 
      </div> 

      <div class="control-group"> 
       <label class="control-label col-md-4"><?php echo $translate->__('File to upload 3'); ?> :</label> 
       <div class="col-md-3"> 
        <input name="foto_ser3" type="file" /> 
       </div> 
      </div> 

      <div class="control-group"> 
       <div class="row"> 
        <div class="col-md-12"> 
         <div class="col-sd-offset-9 col-md-12"><br /> 
          <button class="btn btn-info" name="enviar"><i class="fa fa-check"></i> <?php echo $translate->__('Save'); ?></button> 
         </div> 
        </div> 
       </div> 
      </div>   
     </fieldset> 
    </form> 
    <div id="loading" style="display:none;"><img src="assets/img/ajax_loader.gif" /></div> 

编辑

---

新代码：

<?php 
    require_once("includes/connection.php"); 
    require_once("includes/settings.php"); 
    $alert = ""; 
    if(isset($_FILES['foto_ser{$i}'])) { 
     for($i = 1; $i <= 3; $i++) { 
      if ($_FILES["foto_ser{$i}"]['error'] === UPLOAD_ERR_OK) { 

       if ($valid == 1 && $_FILES["foto_ser{$i}"]["size"] <= $max_weight) { 
        if (file_exists("assets/img/servicios/" . $_FILES["foto_ser{$i}"]["name"])) { 
         $alert = '<div class="alert alert-block alert-danger fade in"> 
        <button type="button" class="close" data-dismiss="alert"></button> 
        <h4 class="alert-heading">Error!</h4> 
        <p>' . $_FILES["foto_ser{$i}"]["name"] . ' El nombre de la foto ya existe!' . '</p></div>'; 
        } else { 
         move_uploaded_file($_FILES["foto_ser{$i}"]["tmp_name"], "assets/img/servicios/" . $_FILES["foto_ser{$i}"]["name"]); 
         $save1 = $_FILES["foto_ser{$i}"]["name"]; 
         $save2 = $_FILES["foto_ser{$i}"]["name"]; 
         $save3 = $_FILES["foto_ser{$i}"]["name"]; 
         $activo = is_array($_POST['activo']) 
          ? implode(', ', $_POST['activo']) 
          : $_POST['activo']; 
         $statement = $conn->prepare("INSERT INTO SERVICIOS (titulo_ser, stitulo_ser, servicios, precio, foto_ser1, foto_ser2, foto_ser3, categoria, subcategoria, visto, activo) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"); 
         if ($statement->execute(array($_POST['titulo_ser'],$_POST['stitulo_ser'],$_POST['servicios'],$_POST['precio'],$save1,$save2,$save3,$_POST['categoria'],$_POST['subcategoria'],$_POST['visto'],$activo))); 
         $dbSuccess = true; 
         $alert = '<div class="alert alert-block alert-success fade in"> 
         <button type="button" class="close" data-dismiss="alert"></button> 
         <h4 class="alert-heading">Success!</h4>' . ' Nuevo servicio agregado satisfactoriamente!' . '</p></div>'; 
         $dbh = null; 
        } 
       } else { 
        $alert = '<div class="alert alert-block alert-danger fade in"> 
        <button type="button" class="close" data-dismiss="alert"></button> 
        <h4 class="alert-heading">Error!</h4> 
        <p>' . ' Tipo de imagen inv&aacute;lida!' . '</p></div>'; 
       } 
      } 
     } 
    } 
?> 

Answer 1

您需要进行上传处理。现在你的代码只是假设所有的上传都会成功。事实上，它假设永远不会成为一个上传。

总之，你需要的是这样的：

for ($i = 1; $i <= 3; $i++) { 
    if ($_FILES["foto_ser{$i}"]['error'] === UPLOAD_ERR_OK) { 
     ...file #$i has succeeded... 
    } 
} 

您的代码也是相当危险的 - 你直接使用用户提供的['name']参数在move_uploaded_files通话，它允许恶意用户乱写一个他们在你的服务器上任意选择的文件。