\n"; print "

";
	print "File name   = ". $_FILES['flag']['name'] . "
\n"; print "Mime type = ". $_FILES['flag']['type'] . "
\n"; print "File size = ". $_FILES['flag']['size'] . "
\n"; print "Local name = ". $_FILES['flag']['tmp_name'] . "
\n"; print "Error code = ". $_FILES['flag']['error'] . "
\n"; print "
"; $ffile = fopen($_FILES['flag']['tmp_name'],"rb"); $contents = fread($ffile,$_FILES['flag']['size']); $dbconn = mysql_connect("localhost","root","TMGData1"); mysql_select_db("McMembers"); $eflag = mysql_escape_string($contents); $sql = "INSERT INTO img SET filetype = '" . $theMime . "',img_name = '" . $name . "', img_data = '" . $eflag . "'"; mysql_query($sql); print "

Length of escaped flag string = " . strlen($eflag) . "

"; ?>