'; if move_uploaded_file($_FILES['prod_img']['tmp_name'], $uploadfile)) { echo "File is valid, and was successfully uploaded\n"; } else { echo "Possible file upload attack!\n"; } } $sql="insert into board(prod_img, title, contents,write_name,prod_price,deli_price,reg_date, read_num) values('".$prod_img."','".$title."','".$contents."','".$write_name."',$prod_price,$deli_price,sysdate(),0)"; $result= mysqli_query($conn, $sql); if($result > 0) { echo""; exit(); } ?>