ขอคำแนะนำเรื่องทำแบบฟอร์มอัพโหลดไฟล์เก็บไว้บน server ค่ะ

if(move_uploaded_file($_FILES["filUpload"]["tmp_name"],"file/".$_FILES["filUpload"]["name"]))
{
	$sql = "insert into files (name_file) values ('".$_FILES["filUpload"]["name"]."')";
	mysql_query("set NAMES UTF8");
	$rs = mysql_query($sql);
	echo "<script>alert('Upload file successfully!');</script>";
	echo "<script>window.top.window.showResult('1');</script>";
}
else
{
	echo "<script>alert('Error! Cannot upload data');</script>";
	echo "<script>window.top.window.showResult('2');</script>";
}