title: Is it necessary to use mysql_real_escape_string() for image into mysql?
body: <p>For example:</p>
  
  <pre><code>    $data = file_get_contents($_FILES['image']['tmp_name']);
      $data = mysql_real_escape_string($data);
      mysql_query("INSERT INTO table set image='$data'....
  </code></pre>
  
  <p>Is this a correct way to stick with?</p>