ADD file via upload

showpicture.php

@@ -0,0 +1,15 @@
+<?php
+header('Content-Type: text/html; charset=UTF-8');
+?>
+<?php
+	header('Content-type: image/jpg');			
+	require "fun.php";
+	$StuXm = $_GET['studentname'];
+	$sql = "select ZP from XS where XM ='$StuXm'";	
+	$result = $db->query(iconv('UTF-8', 'UTF-8', $sql));
+	
+	list($ZP) = $result->fetch(PDO::FETCH_NUM);
+	
+	$image = base64_decode($ZP);					
+	echo $image;									
+?>