Take external variable value and play in an input

Question

I have an image upload, which has a variable called $nome_atual, where the file path is stored.

I need to take that amount and play in one input, on another page. It is possible?

PART OF UPLOAD.PHP FILE

 /* se enviar a foto, insere o nome da foto no banco de dados */
            if(move_uploaded_file($tmp,$pasta.$nome_atual)){
                mysql_query("INSERT INTO fotos (foto) VALUES (".$nome_atual.")");
                echo "<img src='fotos/".$nome_atual."' id='previsualizar' class='img-responsive'>"; //imprime a foto na tela
                echo "'http://audiosonic.com.br/novo/fotos/".$nome_atual."'";
            }else{
                echo "Falha ao enviar";
            }
        }else{
            echo "A imagem deve ser de no máximo 1MB";
        }
    }else{
        echo "Somente são aceitos arquivos do tipo Imagem";
    }
}else{
    echo "Selecione uma imagem";
    exit;
}

Answer 1

As the questioner said that he does not have time to explore and the right way, he wants something simple and did not give enough information for a better answer, I will give a solution.

Although this solution will not bring any safety risk or performance to your application, do not recommend use it for organisational reasons. In the future, if you don’t do things as recommended, it will be almost impossible to maintain your code.

A second problem of using the method below is that if the user is disabled cookies, there is a real chance that your application will not work as expected. But since the people who disable cookies are a minority and given the above reasons, let’s go.

Initial considerations

Your code in a vulnerability called SQL Injection and is using a discontinued PHP function, all of it right there on the line where you do INSERT.

As it is another matter, I will not address it here. Just say it should be fixed before you put the system into production, otherwise you’ll get a headache.

Come on

At the beginning of your upload.php and matricula.php files, just after opening the PHP tag, start the Sessions and leave it as follows:

<?php

    session_start();

Now, we are able to use the super global variable $_SESSION. The variable $_SESSION is a array. You should store your data in it in array format, never directly. See an example:

<?php

    session_start();

    #certo
    $_SESSION['imageUrl'] = 'Aqui você pode colocar qualquer coisa'

    #errado
    $_SESSION = 'Essa é a maneira errada de usar sessions';

The magic behind the sessions is that unlike a common variable, whether it is superglobal or not, it will always be available, even on other pages of your application, even after the user gives F5 or even closes the tab and comes back after (closing the browser tab is different than closing the browser).

This magic works in a logical way, after all, there is no magic. For the sake of awareness, I will explain how this happens.

Brief explanation of how Sesssions work in PHP

When you start a Session with the command session_start(), PHP by default creates a file (this can be changed if you want) and that file will receive a random name. Inside this file, PHP stores a string with all information stored in the variable $_SESSION, so, when reloading the page, it goes after this file and brings back the data that is in it back. To make it work, it creates a cookie in the visitor’s browser and this cookie stores the session ID, so if the visitor has the cookies disabled it will not work. With the session ID, PHP does not generate another ID, it simply goes after the existing session data for that ID.

Of course this is a very basic explanation and does not cover everything that could be addressed. As I said, it is worth researching on the subject. Even, Sessions are a nearly mandatory feature for systems that need the user to be able to log in.

Solution to the case

<?php

session_start();

/* se enviar a foto, insere o nome da foto no banco de dados */
            if (move_uploaded_file($tmp, $pasta . $nome_atual)) {
                $_SESSION['imageUrl'] = $pasta . $nome_atual;
                mysql_query("INSERT INTO fotos (foto) VALUES (".$nome_atual.")");
                echo "<img src='fotos/".$nome_atual."' id='previsualizar' class='img-responsive'>"; //imprime a foto na tela
                echo "'http://audiosonic.com.br/novo/fotos/".$nome_atual."'";
            } else {
                echo "Falha ao enviar";
            }
        } else {
            echo "A imagem deve ser de no máximo 1MB";
        }
    } else {
        echo "Somente são aceitos arquivos do tipo Imagem";
    }
} else {
    echo "Selecione uma imagem";
    exit;
}

On the.php matricula page, only use the variable as follows, when convenient:

<?php

    session_start();

    echo "O caminho da imagem é {$_SESSION['imageUrl']}";

Remembering that you do not need to obligatorily put this path in an input. If it is not mandatory for the client to view the path, you can leave it only in the $_SESSION variable and use it only in PHP to register.

Tip: always use PHP documentation, there they have tips for using all language resources, including tips on Sessions.