I want to know what could be the potential risk with the displaying part of this behavior.
For the upload part:
A form with a file upload for image.
Image content is save into Mysql "longBlob" type (It is a requirement)
For the display (
A script loadImage.php will receive as parameter the record id.
It Will set the proper image header
It will echo the longBlog content
The image will be load like this: