Upload af data til sql, billed og pdf fil til mappe

Jeg har følgende tabel.
CREATE TABLE `varer` (
  `Produkt_id` int(11) NOT NULL auto_increment,
  `Vare_undemenu_nr` int(11) NOT NULL default '0',
  `Firma_navn` text NOT NULL,
  `Vare_tekst` text NOT NULL,
  `Billed_navn` text NOT NULL,
  `Firma_link` text,
  `pdf_fil` text,
  PRIMARY KEY  (`Produkt_id`)
) TYPE=MyISAM AUTO_INCREMENT=5 ;

Og skulle gerne kunne uploade data til sql og filer en mappe med navn images/varer.
Hvordan får jeg lige skiftet de to linie om til at kunne tage filer og lagt dem i den mappe der hedder images/pdf
<input type="text" name="Billed_navn" value="" size="32">
og
<input type="text" name="pdf_fil" value="" size="32">

Jeg har følgende kode.

<?php require_once('../../../Connections/varer.php'); ?><?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
  $theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;   
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
  $insertSQL = sprintf("INSERT INTO varer (Vare_undemenu_nr, Firma_navn, Vare_tekst, Billed_navn, Firma_link, pdf_fil) VALUES (%s, %s, %s, %s, %s, %s)",
                      GetSQLValueString($_POST['Vare_undemenu_nr'], "int"),
                      GetSQLValueString($_POST['Firma_navn'], "text"),
                      GetSQLValueString($_POST['Vare_tekst'], "text"),
                      GetSQLValueString($_POST['Billed_navn'], "text"),
                      GetSQLValueString($_POST['Firma_link'], "text"),
                      GetSQLValueString($_POST['pdf_fil'], "text"));

  mysql_select_db($database_varer, $varer);
  $Result1 = mysql_query($insertSQL, $varer) or die(mysql_error());

  $insertGoTo = "indgang.php";
  if (isset($_SERVER['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $_SERVER['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $insertGoTo));
}

mysql_select_db($database_varer, $varer);
$query_opret_varer = "SELECT * FROM varer";
$opret_varer = mysql_query($query_opret_varer, $varer) or die(mysql_error());
$row_opret_varer = mysql_fetch_assoc($opret_varer);
$totalRows_opret_varer = mysql_num_rows($opret_varer);
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
.style1 {
    font-size: 10px;
    font-weight: bold;
}
-->
</style>
</head>

<body>
<p class="style1">Opret reference </p>
<p>&nbsp;</p>
<hr width="75%">
<p>

============== CUT HERE ======================
<p>
<form method="post" name="form1" action="<?php echo $editFormAction; ?>">
  <table align="center">
    <tr valign="baseline">
      <td nowrap align="right">Vare_undemenu_nr:</td>
      <td><input type="text" name="Vare_undemenu_nr" value="" size="32"></td>
    </tr>
    <tr valign="baseline">
      <td nowrap align="right">Firma_navn:</td>
      <td><input type="text" name="Firma_navn" value="" size="32"></td>
    </tr>
    <tr valign="baseline">
      <td nowrap align="right">Vare_tekst:</td>
      <td><input type="text" name="Vare_tekst" value="" size="32"></td>
    </tr>
    <tr valign="baseline">
      <td nowrap align="right">Billed_navn:</td>
      <td><input type="text" name="Billed_navn" value="" size="32"></td>
    </tr>
    <tr valign="baseline">
      <td nowrap align="right">Firma_link:</td>
      <td><input type="text" name="Firma_link" value="" size="32"></td>
    </tr>
    <tr valign="baseline">
      <td nowrap align="right">Pdf_fil:</td>
      <td><input type="text" name="pdf_fil" value="" size="32"></td>
    </tr>
    <tr valign="baseline">
      <td nowrap align="right">&nbsp;</td>
      <td><input type="submit" value="Insert record"></td>
    </tr>
  </table>
  <input type="hidden" name="MM_insert" value="form1">
</form>
<p>&nbsp;</p>
<p>============== CUT HERE ======================
<tr><td><p>
  <script language="JavaScript" type="text/JavaScript">
<!--

function MyFunc()
{
history.back();
}
//-->
  </script>
Klik her for at g&aring; <a href="java script:MyFunc();">tilbage</a> uden at rette. </p>
</body>
</html>
<?php
mysql_free_result($opret_varer);
?>