Insert BLOB image into BLOB column

Question

I have a php script, which contain a BLOB session image. I want to insert it into the BLOB column.

my wrong code

<?php
require 'config.php';
$userName = "John";
$aVatar = $_SESSION['userImage']; //[BLOB] - from MySql BLOB image
$query = "INSERT INTO `users`(`username`, `avatar`) VALUES ('$userName', '$aVatar')";
if($conn->query($query) == TRUE){
    echo "Done!";
}
?>

When i post this, it show's very long strings into my page! and the message bellow all:

Your string contains also quotes. As i told you many times, use prepared statements — Jens
– Jens, Commented Sep 5, 2018 at 7:26

Abhishek Keshri · Accepted Answer · 2018-09-05 07:48:45Z

2

The problem here is that, if the variable $_SESSION['userImage'] contains any ', the query would not be valid. So you should use mysql_escape_string() to sanitize it:

$query = "INSERT INTO `users`(`username`, `avatar`) VALUES ('$userName', '" . mysql_escape_string($_SESSION['userImage']) . "')";

You can also use addslashes() while assigning the blob variable to solve this:

$aVatar = addslashes($_SESSION['userImage']);

edited Sep 5, 2018 at 7:48

answered Sep 5, 2018 at 7:36

Abhishek Keshri

3,30417 silver badges35 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

maio290 Over a year ago

You should not use mysql_escape_string, since it's deprecated.

Collectives™ on Stack Overflow

Insert BLOB image into BLOB column

1 Answer 1

1 Comment

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Related