php form with text inputs and image uploader

Question

Hi all I'm looking for some guidance as to how can I build a php form which includes both text and an image uploader. I am able to do the two forms separately but am having a bit of difficulty in joining things together.

My html form:

<form name="news-page" action="" method="POST" enctype="multipart/form-data">
    <h1>News</h1>
    <span id="newstitle">
                    <p id="newstitle">News Title</p>
                    <input id="title" type="text" name="newstitle" value="News Title"/>
                </span>
    <span id="newsdate">
                    <p>News Date</p>
                    <input id="news_date" type="text" name="newsdate" value="News Date"/>               
                </span>
    <span id="category">
                    <p>News Category</p>
                    <input id="newscategory" type="text" name="newscategory" value="News Category"/>
                </span>
    <p id="news_info">News Information</p>
    <textarea id="newsinfo" name="newstext">Bacon ipsum dolor amet turducken boudin sirloin ..</textarea>
    <div id="newsimage">
        <img src/>
        <p>Insert News Image</p>
        <label class="myLabel" id="news-image-upload">
            <input type="file" required name="newsuploader" id="fileToUpload" />
            <span>Select Image</span>
        </label>
        <button type="submit" name="add_news_btn">Add News</button>
    </div>
</form>

Code to insert text

if (isset($_POST['add_news_btn'])) {
    $newsdate = (isset($_POST['newsdate']) ? $_POST['newsdate'] : null);
    $newstitle = (isset($_POST['newstitle']) ? $_POST['newstitle'] : null);
    $newscatagory = (isset($_POST['newscategory']) ? $_POST['newscategory'] : null);
    $newstext = (isset($_POST['newstext']) ? $_POST['newstext'] : null);
    include 'connect.php';

    $stmt = $conn->prepare("INSERT INTO news (date, title, content, newscatagory) VALUES(?, ?, ?, ?)");
    $stmt->bind_param('ssss', $newsdate, $newstitle, $newstext, $newscatagory);
    $stmt->execute();
    $stmt->close();
    echo "done";
}

code to upload image

if (isset($_FILES['newsuploader'])) {
    if ($_FILES["newsuploader"]["error"] > 0) {
        echo "No file chosen</br>";
        echo "Database fail</br>";
    }
    else {
        move_uploaded_file($_FILES["newsuploader"]["tmp_name"], "../media/images/" . $_FILES["newsuploader"]["name"]);
        echo "Saved";
        $file = "media/images/" . $_FILES["newsuploader"]["name"];
        include 'connect.php';

        if (!mysqli_select_db($conn, "mostacms_db")) {
            echo "Error: " . mysql_error();
        }
        else echo "all good";
    }

    $stmt = $conn->prepare("INSERT INTO news(imageURL) VALUES(?)");
    $stmt->bind_param('s', $file);
    $stmt->execute();
    $conn->close();
}

Answer 1

try to change this statement

$stmt = $conn->prepare("INSERT INTO news (date, title, content, newscatagory) VALUES(?, ?, ?, ?)");

$stmt->bind_param('ssss', $newsdate, $newstitle, $newstext, $newscatagory);

to

$stmt = $conn->prepare("INSERT INTO news (date, title, content, newscatagory) VALUES(?, ?, ?, ?,?)");

$stmt->bind_param('sssss', $newsdate, $newstitle, $newstext, $newscatagory,$file);

Answer 2

Try posting into this php file.

if (isset($_POST['add_news_btn'])) {
    include 'connect.php';
    $newsdate = (isset($_POST['newsdate']) ? $_POST['newsdate'] : null);
    $newstitle = (isset($_POST['newstitle']) ? $_POST['newstitle'] : null);
    $newscatagory = (isset($_POST['newscategory']) ? $_POST['newscategory'] : null);
    $newstext = (isset($_POST['newstext']) ? $_POST['newstext'] : null);

    // upload file
    if (isset($_FILES['newsuploader'])) {
      if(move_uploaded_file($_FILES["newsuploader"]["tmp_name"], "../media/images/" . $_FILES["newsuploader"]["name"]))
        echo "Saved";
      $imageURL = "media/images/" . $_FILES["newsuploader"]["name"];
    }
    else
      $imageURL='';

    // update details to DB
    $stmt = $conn->prepare("INSERT INTO news (date, title, content, newscatagory,imageURL ) VALUES(?, ?, ?, ?,?)");
    $stmt->bind_param('sssss', $newsdate, $newstitle, $newstext, $newscatagory, $imageURL);
    $stmt->execute();
    $stmt->close();
}

Note : To avoid duplicate file insertion try changing the filename to something unique before saving it.