php signup form with image upload

Hi

I am trying to create a php sign up form with image upload

I was just wondering if anyone knows of a php registration form code with the following

passcode
passcode
first name
last name
email
company logo

I got the registration form working but just need to know how to add image upload into it and display it on the profile page, my registration form code looks like the following so far

PHP Code:

---

<?php
ini_set('display_startup_errors',1);
ini_set('display_errors',1);
error_reporting(-1);
?>

<?php 
    require_once("dealer-functions.php");
    require_once("db-const.php");
    session_start();
    if (logged_in() == true) {
        redirect_to("profile.php");
    }
?>

<?php 
$title = "Dealer Member Registration";

include ( 'includes/header.php' );
?>

<hr />


<form action="<?=$_SERVER['PHP_SELF']?>" method="post" enctype="multipart/form-data"> 
<label>Passcode:</label>
<input type="text" name="passcode" />
<br />
<label>Password:</label>
<input type="password" name="password" />
<br>
<label>First name:</label>
<input type="text" name="first_name" />
<br>
<label>Last name:</label>
<input type="text" name="last_name" />
<br>
<label>Email:</label>
<input type="type" name="email" />
<label>Upload a company logo:</label> 
<input type="hidden" name="MAX_FILE_SIZE" value="100000" /> 
<input name="image" type="file" value="Upload" /> 
<br />
<input type="submit" name="submit" value="Register" /> 
<br><br>
<a href="dealer-member-login.php">I already have an account...</a>
</form>
<?php
if (isset($_POST['submit'])) {
## connect mysql server
    $mysqli = new mysqli(DB_HOST, DB_USER, DB_PASS, DB_NAME);
    # check connection
    if ($mysqli->connect_errno) {
        echo "<p>MySQL error no {$mysqli->connect_errno} : {$mysqli->connect_error}</p>";
        exit();
    }
    
## query database
    # prepare data for insertion
    $passcode    = mysqli_real_escape_string($mysqli, $_POST['passcode']);
    $password    = mysqli_real_escape_string($mysqli, $_POST['password']);
    $first_name    = mysqli_real_escape_string($mysqli, $_POST['first_name']);
    $last_name    = mysqli_real_escape_string($mysqli, $_POST['last_name']);
    $email        = mysqli_real_escape_string($mysqli, $_POST['email']);
 
    # check if username and email exist else insert
    // u = username, e = emai, ue = both username and email already exists
    $exists = "";
    $result = $mysqli->query("SELECT passcode from dealermembers WHERE passcode = '{$passcode}' LIMIT 1");
    if ($result->num_rows == 1) {
        $exists .= "u";
    }    
    $result = $mysqli->query("SELECT email from dealermembers WHERE email = '{$email}' LIMIT 1");
    if ($result->num_rows == 1) {
        $exists .= "e";
    }
 
    if ($exists == "u") echo "<p><b>Error:</b> Passcode already exists!</p>";
    else if ($exists == "e") echo "<p><b>Error:</b> Email already exists!</p>";
    else if ($exists == "ue") echo "<p><b>Error:</b> Passcode and Email already exists!</p>";
    else {
        
        // create an MD5 hash of the password
        $password = md5($password);
        
        # insert data into mysql database
        $sql = "INSERT  INTO `dealermembers` (`id`, `passcode`, `password`, `first_name`, `last_name`, `email`) 
                VALUES (NULL, '{$passcode}', '{$password}', '{$first_name}', '{$last_name}', '{$email}')";
 
        if ($mysqli->query($sql)) {
            redirect_to("dealer-member-login.php?msg=Registered successfully");
        } else {
            echo "<p>MySQL error no {$mysqli->errno} : {$mysqli->error}</p>";
            exit();
        }
    }
}
?>    
<hr />

<?php include( 'includes/footer.php' ); ?>

---

I got image upload working on the profile.php page but the same logo is displayed on the different dealer profile pages, so was wondering if I could make it so that the logo changes to show the dealer's company logo based on what dealer is logged in if that makes sense?

can anyone help please

The code for the profile page is below

PHP Code:

---

<?php 
require_once("dealer-functions.php");
require_once("db-const.php");
session_start();
?>

<?php 
$title = "Dealer Member Profile";

include ( 'includes/header.php' );
?>

<html>
<head>
<script src="./js/dealer-script.js" type="text/javascript"></script><!-- put it on user area pages -->
</head>

<hr />
<?php
if (logged_in() == false) {
    redirect_to("dealer-member-login.php");
} else {
    if (isset($_GET['id']) && $_GET['id'] != "") {
        $id = $_GET['id'];
    } else {
        $id = $_SESSION['dealer_user_id'];
    }
 
    ## connect mysql server
        $mysqli = new mysqli(DB_HOST, DB_USER, DB_PASS, DB_NAME);
        # check connection
        if ($mysqli->connect_errno) {
            echo "<p>MySQL error no {$mysqli->connect_errno} : {$mysqli->connect_error}</p>";
            exit();
        }
    ## query database
        # fetch data from mysql database
        $sql = "SELECT * FROM dealermembers WHERE id = {$id} LIMIT 1";
 
        if ($result = $mysqli->query($sql)) {
            $user = $result->fetch_array();
        } else {
            echo "<p>MySQL error no {$mysqli->errno} : {$mysqli->error}</p>";
            exit();
        }
 
        if ($result->num_rows == 1) {
            # calculating online status
            if (time() - $user['status'] <= (5*60)) { // 300 seconds = 5 minutes timeout
                $status = "Online";
            } else {
                $status = "Offline";
            }
 
            # echo the user profile data
            echo "<div class='profile-text'>";
            echo "<p>User ID: {$user['id']}</p>";
            echo "<p>Passcode: {$user['passcode']}</p>";
            echo "<p>Status: {$status}</p>";            
        } else { // 0 = invalid user id
            echo "<p><b>Error:</b> Invalid user ID.</p>";
        }
}

?>

<?php
mysql_connect("host","username","password");
mysql_select_db("dbname");
    
    $content=file_get_contents($_FILES['pic']['tmp_name']);
    $content=mysql_real_escape_string($content);
    
    @list(, , $imtype, ) = getimagesize($_FILES['pic']['tmp_name']);

    if ($imtype == 3){
        $ext="png"; 
    }elseif ($imtype == 2){
        $ext="jpeg";
    }elseif ($imtype == 1){
        $ext="gif";
    
    $q="insert into dealerlogoimages set profile_pic='".$content."',ext='".$ext."'";
    mysql_query($q);
    header("location: dealer-member-profile.php");
}
?>

<form action="" method="post" enctype="multipart/form-data">
    <div>
       <label>Image:</label>
       <input type="file" name="image" value="">
    </div>
    <div>
       <input type="submit" value="Upload">
    </div>
</form>
 
 <?php
if(isset($_FILES['image']['name'])){
        // *** Add your validation code here *** //
        // Include Connection
    include_once('conn.php');

    // Get Image
    $name = $_FILES['image']['name'];
    $type = $_FILES['image']['type'];
    $get_content = file_get_contents($_FILES['image']['tmp_name']);
    $escape = mysql_real_escape_string($get_content);
    $sql = "INSERT INTO `dealerlogoimages` (`ID`, `name`, `src`, `type`) VALUES (NULL, '$name', '$escape', '$type');";
    if(mysql_query($sql)){
        echo 'Image inserted to database';
    }else{
        echo 'Error data inserting';
    }
}
?>
 
 <?php
// Connection
include_once('conn.php');
$sql = "SELECT * FROM  `dealerlogoimages`";
$qur = mysql_query($sql);
while($r = mysql_fetch_array($qur)){
    extract($r);
    echo '<img src="data:image/png;base64,'.base64_encode($src).'">';
    //echo '<img src="data:image/png;base64,'.base64_encode($src).'" width="450px" height="550px">';
}
?>
 
 <?php
// showing the login & register or logout link
if (logged_in() == true) {
    echo'<br>';
    echo '<a href="dealer-member-logout.php">Log Out</a>';
} else {
    echo '<a href="dealer-member-login.php">Login</a> | <a href="dealer-member-register.php">Register</a>';
}
    echo '</div>';
?>
<hr />

</html>

<?php include( 'includes/footer.php' ); ?>

---