mysql建立图片搜索网站_一步一步教你用PHP+MySql筹建网站 No.5 图片上传、故事删除

本文链接：https://blog.csdn.net/weixin_35697651/article/details/113609317

本文介绍了如何使用PHP和MySQL搭建网站，涉及图片上传、故事删除功能。通过story_submit.php处理表单提交，包括文章更新和新增，使用addslashes处理数据，以及delete_story.php中检查权限进行故事删除。文章适合初学者，逐步讲解关键代码和流程。

摘要由CSDN通过智能技术生成

一步一步教你用PHP+mysql搭建网站 No.5 图片上传、故事删除

上篇文章中讲到，story.php中的表单提交之后的页面是story_submit.php，我们就看一下story_submit.php是如何完成文章的发表的

老样子，先上代码：

<?php # add / modify story record include_once('include_fns.php'); $handle = db_connect(); $headline = $_REQUEST['headline']; $page = $_REQUEST['page']; $time = time(); if ((isset($_FILES['html']['name']) && (dirname($_FILES['html']['type']) == 'text') && is_uploaded_file($_FILES['html']['tmp_name']) )) { // if user upload some files, then set the content of the files as the story_text $story_text = file_get_contents($_FILES['html']['tmp_name']); }else{ $story_text = $_REQUEST['story_text']; } $story_text = addslashes($story_text); if (isset($_REQUEST['story']) && $_REQUEST['story']!='') { # it's an update $story = $_REQUEST['story']; $query = "update stories set headline = '$headline', story_text = '$story_text', page = '$page', modified = $time where id = $story"; }else{ // it's a new story $query = "insert into stories (headline,story_text,page,writer,created,modified) values ('$headline','$story_text','$page','".$_SESSION['auth_user']."', $time,$time)"; } $result = mysql_query($query); if (!$result) { # code... echo "There was a database error when executing

$query";   echo mysql_error();   exit;   }   if ((isset($_FILES['picture']['name']) &&    is_uploaded_file($_FILES['picture']['tmp_name']))) {   # there is uploaded picture   if (!isset($_REQUEST['story']) || $_REQUEST['story']=='') {    $story = mysql_insert_id($handle);    // mysql_insert_id  return the auto generated id used in the last query   }   $type = basename($_FILES['picture']['type']);    switch ($type) {    case 'jpeg':    case 'pjpeg':    case 'png':    case 'jpg':     $filename = "images/$story.jpg";     move_uploaded_file($_FILES['picture']['tmp_name'], '../'.$filename);     $query = "update stories          set picture = '$filename'         where id = $story";     $result = mysql_query($query);     break;        default:     echo 'Invalid picture format:'.$_FILES['picture']['type'];     break;   }  }else{   // there is no image file to upload or didn't get the file's info   echo 'Possible file upload attack:';   echo "filename '".$_FILES['picture']['tmp_name']."'.";  }    header('Location: '.$_REQUEST['destination']); ?>

我们还是先从整体捋一遍代码：

第7，8行

这两个变量都是从上一个页面story.php提交表单中获取的参数

第9行

time函数返回的是时间戳

11-18行

这部分代码返回的是上传的html文件的内容

第20行

这里用到了php中发送text内容到数据库的一个函数：addslashes，作用是在一些特定的符号前面加上/ 符号，特定的符号有', '' , nul, /等，

例如：