Multi Upload with CI & swfUpload

[eluser]mmorgensen[/eluser]
Can you let us know what you mean by session problems?

Just adding the "PHPSESSID" to your SWFUploader does not really do anything, you need to build in logic on the backend to map that session id back to a known user....

for example...


Bob has the session of 123ABC
Bob uses SWFUpload to send a file, we include PHPSESSID=123ABC
SWFUpload posts the form and uploads the data, but because of the way flash handles the upload, the flash app part gets it's own session id of XYZ789.

When the form is submitted, the controller processing the form needs to pull the $_POST['PHPSESSID'] value of ABC123 and map it back to the user Bob. It can pretty much ignore the session id of XYZ789, as it's not needed.

How you get your application to map the session id back to Bob is the tricky part.

For me, I don't actually use the session id; gave up on this. I assign each user a unique 64bit APIKey that they use for uploading. If this value matches, they are golden to upload files. However, if someone else gets a hold of a person's APIKey, then they can upload file to the users account. I give the users a way to change their API key at will too. I'm dealing with a low security app, your mileage may vary depending on your requirements.

Code:

if( isset($_POST['APIKEY']) ){
     $getuser = "SELECT username, user_id, user_bucket, site_apikey
                 FROM ht_users
                 WHERE site_apikey = ? ";
     $query = $this->db->query($getuser, array($_POST['APIKEY']) );
     $userdata = $query->row_array();
}

Hope this helps