How to add attachments from control panel?

[mADmAX`]

I am trying to add something to the admin control panel to add attachments into the database without going through all the checks. This way (as I am the only admin), I can add attachments without having the checks etc, and no posts/threads.

What would be the code to add the file into the databse? I keep getting /var/tmp/xxxxxxxx kinda stuff and I know its not right.

[mADmAX`]

NM, figured it out I think...

I edited attachments.php and renamed it to what I want to use to pull those attachments...

It works well with zip files but no so well with images...

It says downloading picture for around 1-2 mins...then halts...

This is whats inside the php file.

PHP Code:

<?php
error_reporting(7);

$noheader=1;

require("./global.php");

$attachmentinfo=$DB_site->query_first("SELECT filename,filedata,dateline
                            FROM dwipfiles
                            WHERE filesid='$filesid'");

if ($noshutdownfunc) {
  $DB_site->query("UPDATE dwipfiles SET counter=counter+1 WHERE filesid='$filesid'");
} else {
  $shutdownqueries[]="UPDATE LOW_PRIORITY dwipfiles SET counter=counter+1 WHERE filesid='$filesid'";
}

header("Cache-control: max-age=31536000");
header("Expires: " . gmdate("D, d M Y H:i:s",time()+31536000) . "GMT");
header("Last-Modified: " . gmdate("D, d M Y H:i:s",$attachmentinfo[dateline]) . "GMT");
header("Content-disposition: inline; filename=$attachmentinfo[filename]");
header("Content-Length: ".strlen($attachmentinfo[filedata]));
$extension=strtolower(substr(strrchr($attachmentinfo[filename],"."),1));

if ($extension=='gif') {
  header('Content-type: image/gif');
} elseif ($extension=='jpg' or $extension=='jpeg') {
  header('Content-type: image/jpeg');
} elseif ($extension=='png') {
  header('Content-type: image/png');
} elseif ($extension=='pdf') {
  header('Content-type: application/pdf');
} else {
  header('Content-type: unknown/unknown');
}
echo $attachmentinfo[filedata];

?>

[Boofo]

If you get this figured out, I would be interested in trying it out.

[colicab-d]

shouldnt be too hard, just create an edited attachment.php and put a form in it to add a new attachment and create a post id for it when you do so, or add an aditional filed to attachments like adminattachid and then you could insert them that way i guess

[mADmAX`]

Yeah I got it that far, it inserts it into the database...

But when you call from attachments.php like file (above)...

You can get the ZIP files, txt files BUT

On images, it just sits there saying Downloading picture.

It will never show the picture no matter how long I wait. unsure why. Is there soemthing special I have to do ?

[mADmAX`]

This is what I have in the upload section for the attachment..

PHP Code:

  $filesize=@filesize($getfile);
  $filenum = fopen($getfile,"rb");
  $filestuff = fread($filenum,$filesize);
  fclose($filenum);

  $DB_site->query("INSERT INTO dwipfiles (filesid,title,userid,pagetext,dateline,groupid,filename,filedata) VALUES (NULL,'".addslashes($title)."','$bbuserinfo[userid]','".addslashes($pagetext)."','".time()."','".addslashes($groupid)."','".addslashes($attachment_name)."','".addslashes($filestuff)."')"); 


Like I said, only pictures are giving me problems so maybe I need to add something special for them?

[colicab-d]

thats cause ur not inserting anything to filedata... have a wee looky at the attachments table and see whats needED

[mADmAX`]

Its getting added into filedata, or I wouldnt be able to get the zip files, txt files

Let me post whole thing

[mADmAX`]

PHP Code:

// ###################### Start Upload #######################
if ($action=="uploadfile") {

  doformheader("files","douploadfile",1);

  maketableheader("Upload a New File");
  makeuploadcode("File","getfile");

  makechoosercode("File Group","groupid","filegroup",$files[groupid]);
  makeinputcode("Name (optional)","title");

  maketextareacode("File Text","pagetext","",25,120);

  doformfooter("Upload Now");

}

// ###################### Start DoUpload #######################

// ###################### Start DoUpload #######################
if ($HTTP_POST_VARS['action']=="douploadfile") {

    $getfile = $HTTP_POST_FILES['getfile']['tmp_name'];

  $attachment_name = $HTTP_POST_FILES['getfile']['name'];

  $HTTP_POST_VARS['action']="insertfile";
}

// ###################### Start Insert #######################
if ($HTTP_POST_VARS['action']=="insertfile") {

  $filesize=@filesize($getfile);
  $filenum = fopen($getfile,"rb");
  $filestuff = fread($filenum,$filesize);
  fclose($filenum);

  $DB_site->query("INSERT INTO dwipfiles (filesid,title,userid,pagetext,dateline,groupid,filename,filedata) VALUES (NULL,'".addslashes($title)."','$bbuserinfo[userid]','".addslashes($pagetext)."','".time()."','".addslashes($groupid)."','".addslashes($attachment_name)."','".addslashes($filestuff)."')");

  $action="modify";

  echo "<p>Record added</p>";

} 


Like I said, it uploads it into the database, and I can call it out with attachment.php like page but images are either corrupt or missing a flag of some sort cause zip, txt files are fine.

[mADmAX`]

I have also verified the filedata column and its there even though you cant understand the code =P