$file=$_FILES['photofile']; mysql_query("insert into photos(image) values('".addslashes(readfile($file['tmp_name']))."')"); This, for some reason, returns a six digit ...