รบกวนช่วยดู insert และ update ข้อมูลลง database ที่มี upload file มาเกี่ยวข้องหน่อยค่ะ

<?php
if (isset($_GET["id"])) {
    $id = $_GET["id"];
    $sql = "select*from document";
    $sql.= " where id=" . $id;  //หรือ $sql = $sql. "where id=".$id; 
    $result = $con->query($sql);
    if($result!=FALSE){
        //print $result->num_rows;
        $rs=$result->fetch_array();
        $type=$rs["type"];
        $efrom=$rs["efrom"];
        $subject=$rs["subject"];
        $date_receive=$rs["date_receive"];
        $FilesName=$rs["FilesName"];
    }
   
} else {
    $id = "";
    $type="";
    $efrom="";
    $subject="";
    $date_receive="";
    $FilesName="";    
}
?>
<div class="panel panel-info">
    <div class="panel-heading">
        <h4>Upload Document</h4>
    </div>
    <form class="form-horizontal" action="index.php?menu=edoc_save" method="post">
        <div class="form-group">
            <label class="col-md-3 control-label">
                ประเภทของเอกสารเวียน
            </label>
            <div class="col-md-2">
                <select class="form-control" name="type">
                    <option></option>
                    <option value="1" <?php if($status=="1") {print 'selected="selected"';} ?>>หนังสือเข้า</option>
                    <option value="2" <?php if($status=="2"){ print 'selected="selected"';} ?>>หนังสือออก</option>
                    <option value="3" <?php if($status=="3"){ print 'selected="selected"';} ?>>บันทึก</option>
                </select>                
            </div>
      </div>
        <div class="form-group">
            <label class="col-md-3 control-label">
                จาก
            </label>
            <div class="col-md-4">
                <input type="text" class="form-control" name="efrom" value="<?php print "$efrom"; ?>">

            </div>
        </div>
        <div class="form-group">
            <label class="col-md-3 control-label">
                เรื่อง
            </label>
            <div class="col-md-2">
                <input type="text" class="form-control" name="subject" value=" <?php print "$subject"; ?> "> 

            </div>
        </div>
        <div class="form-group">
            <label class="col-md-3 control-label">
                วันที่รับ (yyyy-mm-dd)
            </label>
            <div class="col-md-2">
                <input type="date" class="form-control" name="date_receive" value="<?php print "$date_receive"; ?>">

            </div>
        </div>
        <div class="form-group">
            <label class="col-md-3 control-label">
                ไฟล์ที่จะ upload
            </label>
            <div class="col-md-4">
             <input type="file" class="form-control" name="filUpload">
                           
            </div>
        </div>
        <div class="form-group">
            <div class="col-md-offset-3 col-md-10">
                <input type="hidden" name="id" value="<?php print $id; ?>">
                <button type="submit" class="btn btn-success">บันทึก</button>
                <button type="reset" class="btn btn-warning">ยกเลิก</button>
            </div>
        </div>
    </form>
</div>

?php
if (empty($_REQUEST["type"])) {
    $type = "";
} else {
    $type = $_REQUEST["type"];
}
if (empty($_REQUEST["efrom"])) {
    $efrom = "";
} else {
    $efrom = $_REQUEST["efrom"];
}
if (empty($_REQUEST["subject"])) {
    $subject = "";
} else {
    $subject = $_REQUEST["subject"];
}
if (empty($_REQUEST["date_receive"])) {
    $date_receive = "";
} else {
    $date_receive = $_REQUEST["date_receive"];
}
if (empty($_REQUEST["FilesName"])) {
    $FilesName = "";
} else {
    $FilesName = $_REQUEST["FilesName"];
}

if(move_uploaded_file($_FILES["filUpload"]["tmp_name"],"file/".$_FILES["filUpload"]["name"]))
{
	if ($_REQUEST["id"] == "")
	{	 
	$sql = "insert into document(type,efrom,subject,date_receive,FilesName,date_upload)values('" . $type . "','" . $efrom . "','" . $subject . "','" . $date_receive . "',
	'".$_FILES["filUpload"]["name"]."',now())" or die(mysql_error());	
	}

} else {
	if(move_uploaded_file($_FILES["filUpload"]["tmp_name"],"file/".$_FILES["filUpload"]["name"]))
	{
    $id = $_REQUEST["id"];
    $sql = "update document set ";
    $sql.=" type='" . $type . "'";
    $sql.=",efrom='" . $efrom . "'";
    $sql.=",subject='" . $subject . "'";
    $sql.=",date_receive='" . $date_receive . "'";
    $sql.=",FileNames='" . $_FILES["filUpload"]["name"] . "'";
    $sql.=",date_upload=now()";
    $sql.=" where id=" . $id;
	}
}
if ($con->query($sql)) {
    print "บันทึกเรียบร้อยแล้ว";
    print "<br>";
    ?>
    กด <a href="index.php?menu=dcm_edoc">ที่นี</a> เพื่อกลับไปหน้าแสดงรายการ
    <?php
} else {
    print "cannot save";
}
?>