<?php
if(isset($_POST["submit"])){
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "teatro";

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

$sql = "INSERT INTO spettacoli (Titolo, IDCompagnia, Locandina)";
$sql.= "VALUES ('".$_POST["Titolo"]."','".$_POST["idc"]."','". addslashes(file_get_contents($_FILES["locandina"]['tmp_name']))."')";
if ($conn->query($sql) === TRUE) {
    echo "Record creato con successo";
} else {
    echo "<h2>Error: " . $sql . "<br>" . $conn->error."</h2>";
}

$conn->close();
}
?>