Question

Is this the correct way to edit an inserted rows, fields with the name of an image path.

$query = "UPDATE products SET image = $_FILES["file"]["name"] WHERE name = $name";

I am more concerned with the sql syntax then the php for this.

Answer 1

You need quotes around strings, and you should make sure to sanitize the inputs (or better yet, use parameterization – see Bobby Tables).

$filename = mysql_real_escape_string($_FILES['file']['name']);
$name = mysql_real_escape_string($name);

$query = "UPDATE products SET image = '{$filename}' WHERE name = '{$name}'";