使用php预处理语句将图像（blob）插入到mysql数据库中

Question

I need to insert a image into mysql database using prepared statments... everything else is inserting besides image

$name = mysqli_real_escape_string($conn, $_POST['name']);
    $category = mysqli_real_escape_string($conn, $_POST['category']);
    $privacy = mysqli_real_escape_string($conn, $_POST['privacy']);
    $maxmembers = mysqli_real_escape_string($conn, $_POST['maxmembers']);
    $description = mysqli_real_escape_string($conn, $_POST['description']);
    $file = $_FILES['avatar']['tmp_name'];
    $image = addslashes(file_get_contents($_FILES['avatar']['tmp_name']));
    $image_name =addslashes($_FILES['avatar']['tmp_name']);
    $image_size = getimagesize($_FILES['avatar']['tmp_name']);



$sql = "INSERT INTO hjuma_groups (name, description, category, privacy, maxmembers, owner, avatarname, avatar) VALUES (?, ?, ?, ?, ?, ?, ?, ?)";
            $stmt = mysqli_stmt_init($conn);
            if (!mysqli_stmt_prepare($stmt, $sql)) {
              echo "SQL error";
            }else {
              mysqli_stmt_bind_param($stmt,"sssssssb", $name,$description,$category, $privacy,$maxmembers, $owner, $image_name, $image);
              mysqli_stmt_execute($stmt);
            }

Answer 1

I think the piece of the puzzle you were missing is base64_encode on the image data, sa below:

$name =             $_POST['name']);
$category =         $_POST['category'];
$privacy =          $_POST['privacy'];
$maxmembers =       $_POST['maxmembers']);
$description =      $_POST['description']);
$name =             $_FILES['avatar']['name'];
$image_name =       $_FILES['avatar']['tmp_name'];
$image =            base64_encode( file_get_contents( $image_name ) );
$image_size =       getimagesize( $image_name );



$sql = "insert into `hjuma_groups` 
        ( `name`, `description`, `category`, `privacy`, `maxmembers`, `owner`, `avatarname`, `avatar`) 
        values 
        (?, ?, ?, ?, ?, ?, ?, ?)";
$stmt = mysqli_stmt_init($conn);

if( !mysqli_stmt_prepare( $stmt, $sql ) ) {
    echo "SQL error";
}else {
    mysqli_stmt_bind_param( $stmt, "sssssssb", $name, $description, $category, $privacy, $maxmembers, $owner, $image_name, $image );
    mysqli_stmt_execute($stmt);
}