So I have an MSSQL Database that has photos loaded into it as BLOBs, and I'm trying to grab the BLOB and display it in the browser.
I'm pretty good with PHP and SQL, but for some reason I cannot get this to happen. I either get the 'file' displayed as gibberish inline or nothing at all.
<?php
// image.php - by Hermawan Haryanto <hermawan@dmonster.com>
// Example PHP Script, demonstrating Storing Image in Database
// Detailed Information can be found at http://www.codewalkers.com
// database connection
$conn = mssql_connect("10.10.x.x", "xxxxx", "xxxx")
OR DIE (mssql_error());
@mssql_select_db ("database", $conn) OR DIE (mssql_error());
$sql = "SELECT * FROM Company_Person WHERE PersonID=".$_GET["PersonID"];
$result = mssql_query ($sql, $conn);
if (mssql_num_rows ($result)>0) {
$row = @mssql_fetch_array ($result);
$image_type = $row["image/jpeg"];
$image = $row["Picture"];
Header ("Content-type: $image_type");
echo base64_encode($image);
}
?><?php
header('Content-type: image/jpeg;');
$db = mssql_connect("10.10.x.x", "xxxxx", "xxxxx");
$PersonID = $_GET['PersonID'];
// Specify database here
mssql_select_db('Company_Person');
// Build SQL statement here
$sqlText = 'SELECT Picture FROM Comany_Person WHERE PersonID= ' . $PersonID;
$sql = mssql_query($sqlText);
echo mssql_result($sql,0,"Picture");
mssql_close();
?> <td width="28%" height="135" align="center" valign="middle"><img src="image.php?PersonID=<?php echo $DirectoryIndividual->Fields('PersonID'); ?>" width="100" height="100" alt="<?php echo $DirectoryIndividual->Fields('FullName'); ?>"></td> <td width="28%" height="135" align="center" valign="middle"><img src="blob.php?PersonID=<?php echo $DirectoryIndividual->Fields('PersonID'); ?>" width="100" height="100" alt="<?php echo $DirectoryIndividual->Fields('FullName'); ?>"></td>
$image_type = $row["image/jpeg"]; $image_type = "image/jpeg";http://example.com/blob.php?PersonID=1;DROP TABLE Company_Person<?php
// just so we know it is broken
error_reporting(E_ALL);
// some basic sanity checks
if(isset($_GET['PersonID']) && is_numeric($_GET['PersonID'])) {
//connect to the db
$link = mssql_connect("10.10.x.x", "Jxxxxxx", "Jxxxxxx") or die("Could not connect: " . mssql_error());
// select our database
mssql_select_db("Jxxxxxx") or die(mssql_error());
// get the image from the db
$sql = "SELECT Picture FROM Jxxxxxx WHERE PersonID=003100";
// the result of the query
$result = mssql_query("$sql") or die("Invalid query: " . mssql_error());
// set the header for the image
header("Content-type: image/jpeg");
echo mssql_result($result, 0);
// close the db link
mssql_close($link);
}
else {
echo 'Please use a real id number';
}
?><?php
// just so we know it is broken
error_reporting(E_ALL);
// some basic sanity checks
if(isset($_GET['PersonID']) && is_numeric($_GET['PersonID'])) {
//connect to the db
$link = mssql_connect("xxxxxxxxxxx", "Jxxxxxx", "Jxxxxxx") or die("Could not connect: " . mssql_error());
// select our database
mssql_select_db("Jxxxxxxx") or die(mssql_error());
// get the image from the db
$sql = "SELECT Picture FROM Jxxxxxxx WHERE PersonID= 003100";
// the result of the query
$result = mssql_query("$sql") or die("Invalid query: " . mssql_error());
// set the header for the image
header("Content-type: image/jpeg");
echo mssql_result($result, 0, 0); // <---added the second 0
// close the db link
mssql_close($link);
}
else {
echo 'Please use a real id number';
}
?>// get the image from the db
$sql = "SELECT Picture FROM Jxxxxxxx WHERE PersonID= 003100";// get the image from the db
$sql = "SELECT Picture FROM Jxxxxxxx WHERE PersonID=" . $_GET['PersonID'];<image src="image.php?PersonID=<?php echo $thePerson->id; ?>" alt="" />
Rumors website!! LOL!<?php
// just so we know it is broken
error_reporting(E_ALL);
// some basic sanity checks
if(isset($_GET['PersonID']) && is_numeric($_GET['PersonID'])) {
//connect to the db
$link = mssql_connect("ixxxxxxxx:1433", "Jxxxxxx", "Jxxxxxx") or die("Could not connect: " . mssql_error());
// select our database
mssql_select_db("Jxxxxx") or die(mssql_error());
// get the image from the db
$sql = "SELECT Picture FROM Jxxxxxx WHERE PersonID = $_GET[PersonID] ";
// the result of the query
$result = mssql_query("$sql") or die("Invalid query: " . mssql_error());
// set the header for the image
header("Content-type: image/jpeg");
echo mssql_result($result, 0, 0); // <---added the second 0
// close the db link
mssql_close($link);
}
else {
echo 'Please use a real id number';
}
?>Okay, I took the day off from that issue and let it sleep. Came back to it this morning and had it up and running in 10 minutes