upload fotek+ zapis do db

<?php
if (! empty($_POST["title"])) {
        $filename = $_FILES["soubor"]["tmp_name"];
        $db = new mysqli("mysql.webzdarma.cz", "bike45", "xxxxxxx", "bike45");
        $title = $db->real_escape_string(stripslashes($_POST["title"]));
        $data = $db->real_escape_string(file_get_contents($filename));
        $db->query("INSERT INTO pictures (title, data) VALUES ('$title', '$data')");
        echo "Soubor vlozen pod id " . $db->insert_id;
        $db->close();
}
?>
<form method="post" enctype="multipart/form-data">
Title: <input name="title"><br>
<input type="file" name="soubor"><br>
<input type="submit">
</form>

CREATE TABLE `pictures` (
  `id` int(10) unsigned NOT NULL auto_increment PRIMARY KEY,
  `data` blob,
  `title` varchar(255) default NULL
)

<?php
$db = new mysqli("mysql.webzdarma.cz", "bike45", "xxxxxxx", "bike45");
$result = $db->query("SELECT id, title FROM pictures");

while ($row = $result->fetch_row()) {
        echo "<img src='getimg.php?id=${row[0]}' alt='${row[1]}'>";
}

$db->close();
?>

<?php
$db = new mysqli("mysql.webzdarma.cz", "bike45", "xxxxxxx", "bike45");

$result = $db->query("SELECT data FROM pictures WHERE id=" . ((int) $_GET['id']));

header("Content-Type: image/jpeg");

$row = $result->fetch_row();
echo $row[0];

$db->close();
exit();
?>