$result = mysql_query("insert into images (filename, caption)values('".$_FILES["file"]["name"]."','".mysql_real_escape_string($_POST['caption']."')");