User Input

These scripts allow you to present a form to the user, who can enter text and upload an image; these are displayed first in the browser, with the option to create a PDF file from the output. These scripts should only be considered the basis of a full script and will need adapting considerably. In particular, note that the uploaded image files may need to be deleted at some point.

Warning: All user input passed to mPDF should be sanitized properly.

Examples below serve only as a preview what can be done and must not be used as such.

Also, for purposes of these examples, note that the file upload mechanics were simplified and do not solve data validation and/or verification.

example_userinput.php

<html>
<body>
    <form action="example_userinput2.php" method="post" enctype="multipart/form-data">
        Enter text:
        <br />
        
        <textarea name="text" id="text"></textarea>
        <br />
        
        <label for="file">Choose Image to upload:</label> 
        <input type="file" name="file" id="file" />
        <br />
        
        <input type="submit" name="submit" value="Submit" />
    </form>
</body>
</html>

example_userinput2.php

<?php

if (($_FILES["file"]["type"] == "image/gif" || $_FILES["file"]["type"] == "image/jpeg") 
    && $_FILES["file"]["size"] < 20000) {
    // If the destination file already exists, it will be overwritten
    move_uploaded_file($_FILES["file"]["tmp_name"], "../tmp/" . $_FILES["file"]["name"]);
} else {
    echo "Invalid file";
}

$html = '<html>
    <body>
        <div>' . htmlspecialchars($_POST['text']) . '</div>

        <img src="' ."../tmp/" . htmlspecialchars($_FILES["file"]["name"]) . '" />
    
        <form action="example_userinput3.php" method="post" enctype="multipart/form-data">
            <textarea style="display:none" name="text" id="text">' 
            . htmlspecialchars($_POST['text'])
            . '</textarea>
            <input type="hidden" name="filename" id="filename" 
                value="'. htmlspecialchars($_FILES["file"]["name"]) .'" />
            <input type="submit" name="submit" value="Create PDF file" />
        </form>
    </body>
</html>';

echo $html;

example_userinput3.php

<?php
require __DIR__ . '/vendor/autoload.php';
$mpdf = new \Mpdf\Mpdf();

$html ='<html>
<body>
    <div>' . htmlspecialchars($_POST['text']).'</div>
    <img src="' . "../tmp/" . htmlspecialchars($_POST['filename']) . '" />
</body>
</html>';

$mpdf->WriteHTML($html);
$mpdf->Output();