2016.04.14 php

<?php
    require('connect.php');
    $connect = mysql_connect (localhost, $username, $password);
    if (!connect) {
        die('Not connected:' . mysql_error());
    }

    $db_selected = mysql_select_db($database, $connect);
    if (!db_selected) {
        die('Not connected:' . mysql_error());
    }
    ?>

    <html>

    <head>
    </head>

    <body>

    <form>
  Name:<br>
  <input type="text" name="firstname" ><br>
  Surname:<br>
  <input type="text" name="lastname" ><br><br>
  <input type="hidden" name="size" value="35000">
  <input type="file" name="image"><br><br>
  <input type="submit" value="Submit">
</form>
</body>
</html>

<?php
if (isset($_POST['submit'])){
    $name=$POST['name'];
    $surname=$POST['surname'];
    $image=addlashes(file_get_contents($FILES['image']['tmp_name']));

    $query="INSERT INTO students (name, surname, image) VALUES
('{$name}', '{$surname}', '{$image}')";

mysql_query ($query) or die ("could not do query".mysql_error());
$message="Updated Succesfully";
}else {$message="No Updated";}
echo $message; ?>

}