PHP PDO IMAGE UPLOAD CODE

<!-- wp:code -->\n<pre class=\"wp-block-code\"><code>if(isset($_POST&#91;'submit'])){\n\n\n\n\n $allow = array(\"jpg\", \"JPG\", \"jpeg\", \"JPEG\", \"gif\", \"GIF\", \"png\", \"PNG\", \"pdf\", \"PDF\", \"mp4\", \"MP4\");\n //1st File\n if($_FILES&#91;'photo1']&#91;'name'] == \"\") {\n //echo \"No Image\"\n } else {\n\n $photo1=basename($_FILES&#91;'photo1']&#91;'name']);\n $extension = pathinfo($photo1, PATHINFO_EXTENSION);\n if(in_array($extension,$allow)){\n $target_path = \"assets/images/documents/\";\n $photo1 = md5(rand() * time()).'.'.$extension;\n $target_path = $target_path . $photo1;\n move_uploaded_file($_FILES&#91;'photo1']&#91;'tmp_name'], $target_path);\n $sql = ($photo1!='')?\" inv_upload='$photo1' \". ',':'';\n }\n \n }\n// insert code start \n $insert_bookings = \"INSERT "$table_name" SET \n $sql\n column_1 = '$data1',\n column_2 = '$data2', \"; \n \n \n$sql_insert = $dbconn->prepare($insert_bookings);\n$sql_insert->execute();\n$myid = $dbconn->lastInsertId();\n \n $message=\"Details successfully updated.\";\n $status=\"success\";\n header(\"Location: $redirection_page&amp;id=$myid\");\n}</code></pre>\n<!-- /wp:code -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->