codeforfun-jp/list.php Secret

## list.php
<?php
require_once('functions.php');

$pdo = connectDB();

if ($_SERVER['REQUEST_METHOD'] != 'POST') {
    // 画像を取得

} else {
    // 画像を保存
    if (!empty($_FILES['image']['name'])) {
        $name = $_FILES['image']['name'];
        $type = $_FILES['image']['type'];
        $content = file_get_contents($_FILES['image']['tmp_name']);
        $size = $_FILES['image']['size'];

        $sql = 'INSERT INTO images(image_name, image_type, image_content, image_size, created_at)
                VALUES (:image_name, :image_type, :image_content, :image_size, now())';
        $stmt = $pdo->prepare($sql);
        $stmt->bindValue(':image_name', $name, PDO::PARAM_STR);
        $stmt->bindValue(':image_type', $type, PDO::PARAM_STR);
        $stmt->bindValue(':image_content', $content, PDO::PARAM_STR);
        $stmt->bindValue(':image_size', $size, PDO::PARAM_INT);
        $stmt->execute();
    }
    header('Location:list.php');
    exit();
}
?>
<!DOCTYPE html>
<html lang="ja">
	<?php
	require_once('functions.php');

	$pdo = connectDB();

	if ($_SERVER['REQUEST_METHOD'] != 'POST') {
	// 画像を取得

	} else {
	// 画像を保存
	if (!empty($_FILES['image']['name'])) {
	$name = $_FILES['image']['name'];
	$type = $_FILES['image']['type'];
	$content = file_get_contents($_FILES['image']['tmp_name']);
	$size = $_FILES['image']['size'];

	$sql = 'INSERT INTO images(image_name, image_type, image_content, image_size, created_at)
	VALUES (:image_name, :image_type, :image_content, :image_size, now())';
	$stmt = $pdo->prepare($sql);
	$stmt->bindValue(':image_name', $name, PDO::PARAM_STR);
	$stmt->bindValue(':image_type', $type, PDO::PARAM_STR);
	$stmt->bindValue(':image_content', $content, PDO::PARAM_STR);
	$stmt->bindValue(':image_size', $size, PDO::PARAM_INT);
	$stmt->execute();
	}
	header('Location:list.php');
	exit();
	}
	?>
	<!DOCTYPE html>
	<html lang="ja">