<?php

if(!isset($_POST['Transfert']))
{
include ("forma_charge.inc");

}
else
{
if($_FILES['pix']['size'] == 0)
{
echo "<font color='#CC0000'><center>Le chargement a &#233;choue. V&#233;rifiez la taille du fichier. Elle doit &#234;tre inf&#233;rieure &#224; 2 Mo.</center></font>";

include("forma_charge.inc");
exit();
}
if(!ereg("image",$_FILES['pix']['type']))
{
echo"<font color='#CC0000'><center>Le fichier envoy&#233; n'est pas une image. Essayez avec un autre fichier ayant une extention en .jpg ou .gif</center></font>";

include("forma_charge.inc");
exit();
}
else
{
$destination='c:\data'."\\".$_FILES['pix']['name'];
$temp_file=$_FILES['pix']['tmp_name'];
move_uploaded_file($temp_file,$destination);
echo"<p aling='center'><font color='#CC0000'>Transfert du fichier r&#233;ussi:</font>
{$_FILES['pix']['name']}
({$_FILES['pix']['size']})</p>";

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
$client=$_SESSION['MM_Username'];
$photo=$_FILES['pix']['name'];
$montage=$row_panier['article'];
$insertSQL = sprintf("INSERT INTO bp_photos (client, montage, photo) VALUES (%s, %s, %s)",
GetSQLValueString($client, "text"),
GetSQLValueString($_POST['montage'], "text"),
GetSQLValueString($photo, "text"));

mysql_select_db($database_bp, $bp);
$Result1 = mysql_query($insertSQL, $bp) or die(mysql_error());
}


include("forma_charge.inc");
exit();
}
}
?>

<...>
mysql_select_db($database_bp, $bp);
$result=mysql_query("select id from images where article_id=$article_id") or die('...');
if (mysql_num_rows($result>=5)
{
echo '...';
exit();
}
else
{
добавляем...
}

При добавлении - что-то вроде

$result=mysql_query("insert into images (id, article) values(NULL, $article) or die('...');
$id=mysql_insert_id($result);
$destination='c:\data\$id'.расширение_файла(берётся из $_FILES['pix']['name']);
//Под виндой, что ли?..
//Перемещаем... Радуемся...