PHP MYSQL ช่วยดูโคด insert และ update database หน่อยค่ะ มีการ upload file to database เกี่ยวข้อง

<?php
if (empty($_REQUEST["type"])) {
    $type = "";
} else {
    $type = $_REQUEST["type"];
}
if (empty($_REQUEST["efrom"])) {
    $efrom = "";
} else {
    $efrom = $_REQUEST["efrom"];
}
if (empty($_REQUEST["subject"])) {
    $subject = "";
} else {
    $subject = $_REQUEST["subject"];
}
if (empty($_REQUEST["date_receive"])) {
    $date_receive = "";
} else {
    $date_receive = $_REQUEST["date_receive"];
}
if (empty($_REQUEST["FilesName"])) {
    $FilesName = "";
} else {
    $FilesName = $_REQUEST["FilesName"];
}

if ($_REQUEST["id"] == "")
{
	if(move_uploaded_file($_FILES["filUpload"]["tmp_name"],"file/".$_FILES["filUpload"]["name"]))
	{ 
	$sql = "insert into document(type,efrom,subject,date_receive,FilesName,date_upload)values('" . $type . "','" . $efrom . "','" . $subject . "','" . $date_receive . "','".$_FILES["filUpload"]["name"]."',now())";		
	}
	
}

} else{
	
	if(move_uploaded_file($_FILES["filUpload"]["tmp_name"],"file/".$_FILES["filUpload"]["name"]))
	{
	$id = $_REQUEST["id"];
    $sql = "update document set ";
    $sql.=" type='" . $type . "'";
    $sql.=",efrom='" . $efrom . "'";
    $sql.=",subject='" . $subject . "'";
    $sql.=",date_receive='" . $date_receive . "'"; 
	$sql.=",FilesName='" . $_FILES["filUpload"]["name"] . "'"; 
    $sql.=",date_upload=now()";
    $sql.=" where id=" . $id;
	}
}
if ($con->query($sql)) {
    print "บันทึกเรียบร้อยแล้ว";
    print "<br>";
    ?>
    กด <a href="index.php?menu=dcm_edoc">ที่นี</a> เพื่อกลับไปหน้าแสดงรายการ
    <?php
} else {
    print "cannot save";
}
?>