upload.php

<?php
include 'config.php';

if (!isset($_SESSION['user_id'])) {
    header("Location: login.php");
    exit;
}

if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['image'])) {
    $filename = 'uploads/' . basename($_FILES['image']['name']);
    if (move_uploaded_file($_FILES['image']['tmp_name'], $filename)) {
        $stmt = $pdo->prepare("INSERT INTO images (user_id, filename) VALUES (?, ?)");
        $stmt->execute([$_SESSION['user_id'], $filename]);
        echo "Immagine caricata con successo!";
    } else {
        echo "Errore nel caricamento dell'immagine.";
    }
}
?>

<form method="post" enctype="multipart/form-data">
    <input type="file" name="image" required />
    <button type="submit">Carica Immagine</button>
</form>