Miscellany

<?$query = sprintf("INSERT INTO photos(uid, filename, title, description, submited) VALUES( '%s', '%s', '%s', '%s', '%s') ",mysql_real_escape_string($user),mysql_real_escape_string($photoname),mysql_real_escape_string($title),mysql_real_escape_string($descripion),mysql_real_escape_string($submited));?>