Image upload
This photo gallery application was part of my work at Birkbeck. The application was made using PHP with a MySQL database written in an OOP style.
I’ve made sure to consider the security implications of allowing users to upload files. I carefully checked the extension and mime type and checked other variables to ensure the user uploads a valid image. I also use prepared statements and parameterized queries to protect against any form of SQL injection.
The uploaded images are resized by the application – both to thumbnail and feature size. The user can also download the original file.
The application also includes a JSON web service, which allows the user to retrieve JSON data by entering the id of the photo at the end of a query string. For example: http://titan.dcs.bbk.ac.uk/~jkette01/upload/index.php?json=13
The code can be viewed here https://github.com/jhkette/image_upload_project