<?php
  if (isset($_POST['pic_upload']))
 {
 require'db.php';

 $imageName = mysqli_real_escape_string($conn,$_FILES["profilepic"]["name"]);
$imageData = mysqli_real_escape_string($conn,file_get_contents($_FILES["profilepic"]["tmp_name"]));

$imageType = mysqli_real_escape_string($conn,$_FILES["profilepic"]["type"]);

 if(substr($imageType,0,5) == "image")

  {
      $sql= "INSERT INTO user (img_name,image) VALUES ('$imageName','$imageData') where username= '$x'";
      echo "img done";
  }
  else {
     echo " not upload";
  }

    }

 ?>

<form action="#" method="POST" enctype="multipart/form-data">
 <input type="file" name="profilepic"><br>
 <input type="submit" name="pic_upload"class="btn-1">
  </form>