Ross wrote:
> tthe image does not display although it exists in the table 'images'
> 
> 
> This calls the download script
> 
> 
> <?
>  $property_id = $_SESSION['property_id'] ;
>  $query = "SELECT * FROM images WHERE property_id='$property_id'";
> $result = mysql_query($query);
> while($row = mysql_fetch_array($result, MYSQL_ASSOC))
> {
> 
> echo $id= $row['id'];
> echo $title= $row['title'];
> $link = "download.php?id=$id";
> }

what do you see when you stick the src url
in the address bar of your browser?
and what response headers do you get from the download.php?


> ?>
> <img src="<?php echo $link; ?>"/>
> 
> 
> 
> this is the download script
> 
> id = $_GET['id'];

$id = $_GET['id'];
^
|
\- missing $ ???


and then your not doing any input cleaning:

if (!isset($_GET['id']) || (($id = intval($_GET['id'])) < 1))
        die('eat **** and die');

> $query = "SELECT name, type, size, content FROM images WHERE id ='$id'";
> 
>  $result = mysql_query($query) or die(mysql_error());
> list($name, $type, $size, $content) = mysql_fetch_array($result);
> 
> header("Content-length: $size");
> header("Content-type: $type");
> 
> echo $content;

and does $content actually contain image data?

> 
> exit; 
> 

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to