Insert image path and data in MySQL database - php

Question

I have two pages: displayhotels.php and addrooms.php. When I click on the add rooms link which is on the displayhotels.php page, it fetches the hotel name and displays it on the addrooms.php page. Now, I need to insert the hotel name and other variables in a table. For some reason, the image path and data are not storing in the db. However, the image is updating in the folder.
if (!isset($_FILES['image']['tmp_name'])) {
echo "";
}else{
$file=$_FILES['image']['tmp_name'];
$image= addslashes(file_get_contents($_FILES['image']
['tmp_name']));
$image_name= addslashes($_FILES['image']['name']);
move_uploaded_file($_FILES["image"]
["tmp_name"],"rooms/" . $_FILES["image"]["name"]);
if(isset($_POST['submit']))
{
$image="rooms/" . $_FILES["image"]["name"];
$rnum = $_POST['rnum'];
$rtype = $_POST['rtype'];
$people = $_POST['people'];
$cond = $_POST['cond'];
$price = $_POST['price'];
$rooms = $_POST['rooms'];
$sql = "INSERT INTO `room`(`hotel_name`, `roomNum`,`roomType`,
`noOfPeople`, `conditions`, `price`, `rooms`, `image`) VALUES
('$name','$rnum', '$rtype', '$people', '$cond', '$price', '$rooms',
'$image')";

Answer 1

You are first making correct $image variable:
$image="rooms/" . $_FILES["image"]["name"];
But then you overwrite it with a wrong one:
$image = $_POST['image'];
So you need to remove this line and you'll do fine i guess.

Answer 2

Few debugging tips:
First of all add error_reporting() in your code.
Than check are you getting values from HTML form by using:
print_r($_POST);
Also check are you using proper name attributes in input field?
Error in your code:
In your query you didn't defined the variable:
$name
You missed hotel_name in your query.

Answer 3

Try debugging with a logger and using tail -f [log file name] from the terminal if using LAMP to step through the code. Are you sure $_POST['submit'] is set? How are you connecting to the db? This isn't shown in the code. Maybe the file I/O is working fine (the image updates in the folder) but you're not connecting to the db and the problem isn't the sql statement itself but the actual connection.
Also, look into using prepared statements to make your code more secure, and not directly accessing $_POST variables. See http://php.net/manual/it/mysqli.quickstart.prepared-statements.php and http://php.net/manual/en/function.filter-input.php for more information.