Anonymous

<html>
<head>
<title>Upload File To MySQL Database</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
.box {
    font-family: Arial, Helvetica, sans-serif;
    font-size: 12px;
    border: 1px solid #000000;
}
body,td,th {
	font-family: BankGothic Lt BT;
	font-size: 12px;
	color: #000000;
}
-->
</style>
</head>

<body>
<?
if(isset($_POST['upload']))
{
        $fileName = $_FILES['userfile']['name'];
        $tmpName  = $_FILES['userfile']['tmp_name'];
        $fileSize = $_FILES['userfile']['size'];
        $fileType = $_FILES['userfile']['type'];
        
        $fp = fopen($tmpName, 'r');
        $content = fread($fp, $fileSize);
        $content = addslashes($content);
        fclose($fp);
        
        if(!get_magic_quotes_gpc())
        {
            $fileName = addslashes($fileName);
        }
        
////////////////////////////////////////////////	  	
include("config/config.php");
////////////////////////////////////////////////
///////DO NOT CHANGE////////////////////////////
$con = mysql_connect("$host","$dbuser","$dbpass");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
  mysql_select_db("$dbname", $con);
////////////////////////////////////////////////  
        

	
if($fileSize >= 5000) && dir $fileName{
echo "Your file size is over limit<BR>";
}

else
{    
    $query = "INSERT INTO upload (name, size, type, content ) ".
                 "VALUES ('$fileName', '$fileSize', '$fileType', '$content')";

        mysql_query($query) or die('Error, query failed');                    
      
	    mysql_close($con);
        
        echo "<br>File $fileName uploaded<br> \n \n You can now go to download page <a href=\"download.php\">Continue</a>";
	}
}        
?>
<br>
<br>
<br>
<br>
<form action="" method="post" enctype="multipart/form-data" name="uploadform">
  <table width="350" border="0" cellpadding="1" cellspacing="1" class="box">
    <tr> 
      <td width="246"><input type="hidden" name="MAX_FILE_SIZE" value="2000000"><input name="userfile" type="file" class="box" id="userfile">
      </td>
      <td width="80"><input name="upload" type="submit" class="box" id="upload" value="  Upload  "></td>
    </tr>
  </table>
</form>
</body>
</html>