PHP无法将图片存入数据库求助：HTML表单上传报错

Hey there! Let's tackle your image upload to database issue step by step. First, let's clean up your incomplete HTML form code to make it functional, then walk through the most common pitfalls that cause PHP upload errors.

Your Cleaned-Up HTML Form #

<form action="login.php" method="post" enctype="multipart/form-data">
  <label>User: <input type="text" name="user_name1" required /></label>
  <label>Password: <input type="password" name="password1" required /></label>
  <label>Email: <input type="email" name="email11" required /></label>
  <label>Upload any image you want: <input type="file" name="image" accept="image/*" /></label>
  <input class="submit" type="submit" name="submit2" value="Submit" />
</form>

1. Missing Basic File Upload Validation #

Most errors start here—you need to confirm the file uploaded successfully before processing it. Add these checks at the top of your login.php:

if (isset($_POST['submit2'])) {
    // Check if the file uploaded without system errors
    if ($_FILES['image']['error'] === UPLOAD_ERR_OK) {
        $tmpFilePath = $_FILES['image']['tmp_name'];
        $fileName = $_FILES['image']['name'];
        $fileSize = $_FILES['image']['size'];
        $fileType = $_FILES['image']['type'];
        $fileExt = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));

        // Restrict to valid image formats
        $allowedExts = ['jpg', 'jpeg', 'png', 'gif'];
        if (in_array($fileExt, $allowedExts)) {
            // Read the image content as a string
            $imageData = file_get_contents($tmpFilePath);
            // Proceed to database insertion (use prepared statements!)
        } else {
            die("Oops: Only JPG, JPEG, PNG, and GIF files are allowed.");
        }
    } else {
        die("Upload failed with error code: " . $_FILES['image']['error']);
    }
}

2. Wrong Database Column Type #

Your database column for storing images must be set to LONGBLOB (not BLOB or TEXT). BLOB has a small size limit (64KB) that's too restrictive for most images, while LONGBLOB supports up to 4GB—perfect for image files.

3. Skipping Prepared Statements (Security + Error Prevention) #

Never use raw string concatenation for database queries—it leads to SQL injection and unpredictable errors. Use prepared statements instead:

// Assume $conn is your established MySQLi database connection
$stmt = $conn->prepare("INSERT INTO your_users_table (user_name, password, email, image) VALUES (?, ?, ?, ?)");
// Bind parameters: s = string, b = blob
$stmt->bind_param("sssb", $_POST['user_name1'], $_POST['password1'], $_POST['email11'], $imageData);

if ($stmt->execute()) {
    echo "User data and image uploaded successfully!";
} else {
    echo "Insert error: " . $stmt->error;
}
$stmt->close();

4. php.ini Upload Limits Are Too Low #

If you're getting "file too large" errors, tweak these settings in your php.ini file:

• upload_max_filesize: Set to a value larger than your expected image size (e.g., 10M for 10MB)
• post_max_size: Must be larger than upload_max_filesize (e.g., 12M)
• max_execution_time: Increase if uploads take too long (e.g., 30 seconds)

Don't forget to restart your web server after making these changes.

5. No Manual File Size Check #

Even with php.ini limits, add a manual check in PHP to enforce your own size rules:

$maxAllowedSize = 10 * 1024 * 1024; // 10MB
if ($fileSize > $maxAllowedSize) {
    die("Error: File is too big—max allowed size is 10MB.");
}

内容的提问来源于stack exchange，提问作者mira