ok ho semplificato in:

Codice PHP:
  $data = addslashes($_FILES["upfile"]["tmp_name"], $_FILES["upfile"]["size"]); 
ma mi riporta:
Warning: Wrong parameter count for addslashes() in C:\www\Upload\upload.php on line 27
INSERT INTO uploaded_files (fileBinario, files_name) VALUES (, 2)

(perchè mai??)

anche se uso mysql_real_escape_string():
Warning: mysql_real_escape_string() expects parameter 2 to be resource, integer given in C:\www\Upload\upload.php on line 27