How can PHP scripts be optimized for handling image uploads, file extensions, and data storage in a database?

When handling image uploads in PHP, it is important to optimize the script by validating file extensions, checking file size limits, and securely storing the uploaded files in a database. To optimize image uploads, you can use PHP functions like `pathinfo()` to extract the file extension, `move_uploaded_file()` to move the uploaded file to a designated folder, and `mysqli_real_escape_string()` to escape data before storing it in a database. 

// Validate file extension
$allowed_extensions = array('jpg', 'jpeg', 'png', 'gif');
$uploaded_file_extension = pathinfo($_FILES['image']['name'], PATHINFO_EXTENSION);
if (!in_array($uploaded_file_extension, $allowed_extensions)) {
    die('Invalid file extension. Only JPG, JPEG, PNG, and GIF files are allowed.');
}

// Check file size limit
$max_file_size = 5 * 1024 * 1024; // 5MB
if ($_FILES['image']['size'] > $max_file_size) {
    die('File size exceeds the limit of 5MB.');
}

// Move uploaded file to designated folder
$upload_directory = 'uploads/';
$uploaded_file_path = $upload_directory . $_FILES['image']['name'];
if (!move_uploaded_file($_FILES['image']['tmp_name'], $uploaded_file_path)) {
    die('Failed to move uploaded file.');
}

// Securely store file path in database
$escaped_file_path = mysqli_real_escape_string($conn, $uploaded_file_path);
$query = "INSERT INTO images (file_path) VALUES ('$escaped_file_path')";
mysqli_query($conn, $query);

Keywords

PHP image uploads file extensions data storage database

Related Questions