server side

<?php
include('install_lang_japanese.php');
include('functions.php');


if (phpversion() >='4.1.0') {
    include_once('vars4.1.0.php');
}else {
    include_once('vars4.0.6.php');
}

//connect to database
$dbc=mysql_connect(_SRV,_ACCID,_PWD) or die(_ERROR15.": ".mysql_error());
$db=mysql_select_db("QPL",$dbc) or die(_ERROR17.": ".mysql_error());


$target_path = "data/";

$target_path = $target_path . basename( $_FILES['uploadedfile']['name']);
//print_r($_FILES);
        if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
                echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded";
                }
        else{
                echo "There was an error uploading the file, please try again!";
                }

switch(postVar('action')) {
    case 'oqcdata' :
        oqcdata(postVar('mod'),postVar('no'),postVar('lotno'),postVar('date'),
                postVar('sym'),postVar('coz'),postVar('stat'),postVar('cm'),postVar('detail'));
        break;
}

function oqcdata($mod,$no,$lotno,$date,$sym,$coz,$stat,$cm,$detail) {

    $Model          = mysql_real_escape_string($mod);
        $Serial     = mysql_real_escape_string($no);
    $Lot            = mysql_real_escape_string($lotno);
    $Date       = mysql_real_escape_string($date);
    $Sym        = mysql_real_escape_string($sym);
    $Coz        = mysql_real_escape_string($coz);
    $Stat           = mysql_real_escape_string($stat);
        $CM         = mysql_real_escape_string($cm);
    $Detail     = mysql_real_escape_string($detail);
    $Model          = strtoupper($Model);
    $Serial     = strtoupper($Serial);
    $Lot            = strtoupper($Lot);
    $Sym        = stripcslashes($Sym);
    $Coz            = stripcslashes($Coz);
    $Stat           = stripcslashes($Stat);

//build query
  $sql = "INSERT INTO OQC ";
  $sql.= "(Model, Serial, Lotno, Date, Symptom, Cause, Status, CM,Detail) ";
  $sql.= "VALUES ('";
  $sql.= $Model."','".$Serial."','".$Lot."','".$Date."','".$Sym."','".$Coz."','";
  $sql.= $Stat."','".$CM."','".$Detail."')";
echo $sql;
$result=mysql_query($sql) or die(_ERROR26.": ".mysql_error());
echo $result;
mysql_close($dbc);
}

?>