<?php
// ---------------------------------------------
// Pure PHP Upload version 1.1
// -------------------------------------------
if (phpversion() > "4.0.6") {
$HTTP_POST_FILES = &$_FILES;
}
define("MAX_SIZE",300000);
define("DESTINATION_FOLDER", "./upload");
define("no_error", "tampil_surat_masuk.php");
define("yes_error", "gagal.php");
$_accepted_extensions_ = "";
if(strlen($_accepted_extensions_) > 0){
$_accepted_extensions_ = @explode(",",$_accepted_extensions_);
} else {
$_accepted_extensions_ = array();
}
$_file_ = $HTTP_POST_FILES['no_agenda'];
if(is_uploaded_file($_file_['tmp_name']) && $HTTP_POST_FILES['no_agenda']['error'] == 0){
$errStr = "";
$_name_ = $_file_['name'];
$_type_ = $_file_['type'];
$_tmp_name_ = $_file_['tmp_name'];
$_size_ = $_file_['size'];
if($_size_ > MAX_SIZE && MAX_SIZE > 0){
$errStr = "File troppo pesante";
}
$_ext_ = explode(".", $_name_);
$_ext_ = strtolower($_ext_[count($_ext_)-1]);
if(!in_array($_ext_, $_accepted_extensions_) && count($_accepted_extensions_) > 0){
$errStr = "Estensione non valida";
}
if(!is_dir(DESTINATION_FOLDER) && is_writeable(DESTINATION_FOLDER)){
$errStr = "Cartella di destinazione non valida";
}
if(empty($errStr)){
if(@copy($_tmp_name_,DESTINATION_FOLDER . "/" . $_name_)){
header("Location: " . no_error);
} else {
header("Location: " . yes_error);
}
} else {
header("Location: " . yes_error);
}
}
?>
<?php require_once('Connections/konekdb.php'); ?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
if (PHP_VERSION < 6) {
$theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
}

$theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form_input_surat_masuk")) {
$insertSQL = sprintf("INSERT INTO surat_masuk (no_agenda, no_surat, tanggal_surat_masuk, tujuan_surat, asal_surat, perihal, sifat, derajat, disposisi, catatan, status, `file`) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",
GetSQLValueString($_POST['no_agenda'], "text"),
GetSQLValueString($_POST['no_surat'], "text"),
GetSQLValueString($_POST['tanggal_surat_masuk'], "text"),
GetSQLValueString($_POST['tujuan_surat'], "text"),
GetSQLValueString($_POST['asal_surat'], "text"),
GetSQLValueString($_POST['perihal'], "text"),
GetSQLValueString($_POST['sifat_surat'], "text"),
GetSQLValueString($_POST['derajat_surat'], "text"),
GetSQLValueString($_POST['disposisi_surat'], "text"),
GetSQLValueString($_POST['catatan'], "text"),
GetSQLValueString($_POST['status_surat'], "text"),
GetSQLValueString($_POST['file'], "text"));

mysql_select_db($database_konekdb, $konekdb);
$Result1 = mysql_query($insertSQL, $konekdb) or die(mysql_error());

$insertGoTo = "home.php";
if (isset($_SERVER['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $_SERVER['QUERY_STRING'];
}
header(sprintf("Location: %s", $insertGoTo));
}



Mohon bantuannya dari agan2 sekalian, jadi kasusnya ini script bisa upload ke folder file yg dituju, tapi form lainnya tidak bisa tersimpan di dalam database, Sementara kalau saya hilangkan form upload file bisa tersimpan di database,....??? Mohon bantuan nya dimana yg error supaya bisa simpan file berikut databasenya,...Terima kasih banyak sebelumnya.