How to map upload.php and my table information

[eluser]iainco[/eluser]
When you use the Active Record insert function, you must supply an array with column names as indexes (or an object) and their respective values as the elements/variables.

But I'm not quite sure I follow you, 'cause if you're inserting data into a table, then you'll already know what column names are and they won't change.

Active Record queries escape data for you - "All values are escaped automatically producing safer queries." from user guide.