insertPublish2.php

<?php
header("content-type:text/html; charset=utf8");
session_start();
echo session_id() . "<br>";
//$mysql = new SaeMysql();
$mysqli = mysqli_connect("127.0.0.1", "root", "19960907", "pingping");
if (mysqli_connect_errno($mysqli)) {
    echo "Failed to connect to MYSQL: " . mysqli_connect_error();
}

$mysqli->set_charset("utf8");

//var_dump($_POST);

echo "<br>";
//var_dump($_FILES);


if (isset($_FILES['image']['tmp_name'])) {
    // Temporary file name stored on the server
    $tmpName = $_FILES['image']['tmp_name'];
    $activity_name = $_POST['activity_name'];
    $activity_time = $_POST['activity_time'];
    $activity_population = $_POST['activity_population'];
    $activity_place = $_POST['activity_place'];
    $activity_describe = $_POST['activity_describe'];
    /*
    // Read the file
    $fp = fopen($tmpName, 'r');
    $data = fread($fp, filesize($tmpName));
    $data = addslashes($data);
    fclose($fp);
    //echo $data;
    //$image = addslashes(file_get_contents($_FILES['image']['tmp_name'])); //SQL Injection defence!
    */

    if (move_uploaded_file($_FILES['image']['tmp_name'], "f:\\github\\www\\PingPing\\images\\" . $_FILES['image']['name'])) {
        echo "File is valid, and was successfully uploaded.\n";
    } else {
        echo "Possible file upload attack!\n";
    }
    $file = "images/" . $_FILES['image']['name'];

    $sql = "insert into activity";
    $sql .= "(activity_name, activity_time, activity_population, activity_place, activity_describe, picdirectory)";
    $sql .= "values('$activity_name', '$activity_time', '$activity_population', '$activity_place', '$activity_describe', '$file')";
    //$sql .= "values('$image')";
    if ($mysqli->query($sql) != TRUE) {
        echo "insert successful";
    }

    $sql = "select * from activity";
    $result = $mysqli->query($sql);
    //var_dump($result);

    if ($result->num_rows > 0) {
        while ($row = $result->fetch_assoc()) {
            echo $row["picdirectory"];
            //echo "<img src= 'images/carrot.jpg'>";
            echo "<img src='" . $row["picdirectory"] . "'>";
        }
    }
}

?>