$id = $user->getid();
$sql = "INSERT INTO `upload` (id, name, size, type, location) VALUES ('$id','$name', '$size', '$type', '$location$name')";