<?
ini_set('display_errors', 1);
error_reporting(-1);

$username = "demo";
$password = "wfffrfergwtrg345g34gyj567jh45gfwxsr2d5zxgctg35y653xz4#%T^#%@#F@@#X$RZXXFDxrwcrgx2eG#FX"
$host = "localhost";
$database = "demo";

$link = mysql_connect($host, $username, $password);

mysql_select_db ($database);

$month=$_POST['month'];
$year=$_POST['year'];
$qued="$month $year";

$date = date('Y-m', strtotime($qued));

$first = mysql_real_escape_string($_POST['first']);
$last = mysql_real_escape_string($_POST['last']);
$title = mysql_real_escape_string($_POST['title']);
$category = mysql_real_escape_string($_POST['category']);
$bname = mysql_real_escape_string($_POST['bname']);
$comment = mysql_real_escape_string($_POST['comment']);

if (isset($_FILES['image']) && $_FILES['image']['size'] > 0) {

$tmpName  = $_FILES['image']['tmp_name'];

$fp = fopen($tmpName, 'r');
$data = fread($fp, filesize($tmpName));
$data = addslashes($data);
fclose($fp);
$query = "INSERT INTO test ";
$query .= "(`id`,`date`,`first`,`last`,`title`,`category`,`bname`,`comment`,`image`) VALUES ('NULL','$date','$f$
$results = mysql_query($query, $link);

print "Thank you, your file has been uploaded.";
mysql_close();

}
var_dump(mysql_error());
echo $comment;
?>