image upload php

//upload file size <br />ini_set("upload_max_filesize","10M"); <br />ini_set("post_max_size","10M"); <br />ini_set("max_execution_time","10M"); <br />ini_set("max_input_time","10M"); <br />$dateposted =date("Y-m-d"); <br /> <br /> <br /> <br />if(isset($_REQUEST['submit'])) <br />{ <br />extract($_REQUEST); <br /> <br />$c1 = rand(0,9);$c2 = rand(0,9);$c3 = rand(0,9);$c4 = rand(0,9); <br />$rand = $c1.$c2.$c3.$c4; <br />$dir_path = "booksummaries/".$rand.$_FILES['pdf']['name']; <br /> <br />$c1 = rand(0,9);$c2 = rand(0,9);$c3 = rand(0,9);$c4 = rand(0,9); <br />$rand = $c1.$c2.$c3.$c4; <br />$dir_path1 = "booksummaries/".$rand.$_FILES['image']['name']; <br /> <br /> <br />if($_FILES['pdf']['name'] && $_FILES['image']['name']){ <br />move_uploaded_file($_FILES['pdf']['tmp_name'],$dir_path); <br />move_uploaded_file($_FILES['image']['tmp_name'],$dir_path1); <br />$in="UPDATE ".BOOKSSUMMARYLIST." set `title`='$title',`image`='$dir_path1',`file`='$dir_path' where `id`='".$_REQUEST['id']."'"; <br /> <br />} <br />elseif($_FILES['pdf']['name']){ <br />move_uploaded_file($_FILES['pdf']['tmp_name'],$dir_path); <br />$in="UPDATE ".BOOKSSUMMARYLIST." set `title`='$title',`file`='$dir_path' where `id`='".$_REQUEST['id']."'"; <br /> <br />} <br />elseif($_FILES['image']['name']){ <br />move_uploaded_file($_FILES['image']['tmp_name'],$dir_path1); <br />$in="UPDATE ".BOOKSSUMMARYLIST." set `title`='$title',`image`='$dir_path1' where `id`='".$_REQUEST['id']."'"; <br /> <br />} <br />else { <br />$in="UPDATE ".BOOKSSUMMARYLIST." set `title`='$title' where `id`='".$_REQUEST['id']."'"; <br /> <br />} <br /> <br /> <br /> <br />$out=mysql_query($in); <br />$msg="Book information updated Successfully"; <br /> <br />echo "<meta http-equiv='refresh' content='3;url=books_summary_list.php?id=$_REQUEST[id]&page=$_REQUEST[page]'>"; <br />} <br /> <br /> <br />$in="select * from ".BOOKSSUMMARYLIST." where `id`='".$_REQUEST['id']."'"; <br />$out=mysql_query($in); <br />$record=mysql_fetch_array($out); <br />