PHP and MySQL Web Development 4th Ed-tqw-_darksiderg

Implementing Administrative Functions
731
Listing 30.16
Continued
do_html_footer();
exit;
}
move_uploaded_file($_FILES['userfile']['tmp_name'][$i],
$destination);
}
$i++;
display_preview_button($list, $mailid, 'preview-html');
display_preview_button($list, $mailid, 'preview-text');
display_button('send', "&id=$mailid");
echo " ";
do_html_footer();
?>
Let’s walk through the steps in Listing 30.16. First, you start a session and check that the
user is logged in as an administrator; you don’t want to let anybody else upload files.
Strictly speaking, you should probably also check the list and mailid variables for
unwanted characters, but we ignored this for the sake of brevity.
Next, you set up and send the headers for the page and validate that the form was
filled in correctly.This step is important here because it’s quite a complex form for the
user to fill out.
Then you create an entry for this mail in the database and set up a directory in the
archive for the mail to be stored in.
Next comes the main part of the script, which checks and moves each of the
uploaded files.This is the part that is different when uploading multiple files.You now
have four arrays to deal with; these arrays are called $_FILES[‘userfile’][‘name’],
$_FILES[‘userfile’][‘tmp_name’], $_FILES[‘userfile’][‘size’], and
$_FILES[‘userfile’][‘type’].They correspond to their similarly named
equivalents in a single file upload, except that each of them is an array.The first
file in the form is detailed in $_FILES[‘userfile’][‘tmp_name’][0],
$_FILES[‘userfile’][‘name’][0], $_FILES[‘userfile’][‘size’][0], and
$_FILES[‘userfile’][‘type’][0].
Given these three arrays, you perform the usual safety checks and move the files into
the archive.
Finally, you give the administrator some buttons that she can use to preview the
newsletter she has uploaded before she sends it and a button to send it.You can see the
output from upload.php in Figure 30.13.