, , " ", :
$query = "INSERT INTO upload (name, size, type, content ) ".
"VALUES ('$fileName', '$fileSize', '$fileType', '$content')";
, , , , , , , , .
, , :
select *
from upload
where name = '$fileName'
and size = '$fileSize'
and type = '$fileType'
and content = '$content'
, , , " ".
BTW: , , , - (. md5 / sha1).
BTW 2: SQL Injections, , , : , / " ", , :
$id = $_GET['id'];
$query = "SELECT name, type, size, content " .
"FROM upload WHERE id = '$id'";