{  $filename = $con->real_escape_string($_FILES['upload']['name']); $filetype = $con->real_escape_string($_FILES['upload']['type']); $filesize = intval($_FILES['upload']['size']);  $query = "UPDATE `contracts` set `filename` = '$filename', `filetype` = '$filetype',`filesize` = '$filesize' WHERE `id` = '$id' " ;  if ($con->query($query) == TRUE) { echo "<br><br> New record created successfully"; } else { 