Make a form like this:
<form method="post" enctype="multipart/form-data" action="ok.php">
<input type="file" name="uploadedfile" size="30">
<input type="submit" value="Insert" name="submit">
</form>
On ok.php page put something like this:
if($uploadedfile<>"none") {
if(!copy($uploadedfile,"../dir/$uploadedfile_name")) {
print("Error. The file might be too big.");
}
else {
$query = "INSERT INTO $table_foto (filename,description,ref_id) VALUES('$uploadedfile_name','$description','$ref_id')";
$result = mysql_query($query, $connect);
print("Image successfully uploaded.<br>");
}
}
Then call the filename on your page.
Remember to give a chmod 777 to the dir you are putting the image in.