You asked about your query, and here is my suggestion for the most of it, not too sure show your date field is set up but here is what you can try, you need to quote your variables except numbers or integers and CURDATE is one of them.
mysql_query("INSERT INTO photos(`photo_filename`, `filetype`, `size`, 'date')VALUES('$filename2', '$filetype', '$filesize', CURDATE())";
also I would do the query this way to check what PHP and MySQL see by this
$query="INSERT INTO photos(`photo_filename`, `filetype`, `size`, 'date') VALUES('$filename2', '$filetype', '$filesize', CURDATE()";
echo $query; //then execute the query
$result=mysql_query($query)
or die("Could not execute the query. MySQL said: ".mysql_error());