댓글 파일 첨부 기능 구현하기

<div class="comment-btn">

          <div class="form-group pull-right">

            <div class="btn-group">

              <input type="file" name="wr_attachment" class="frm_file frm_input">

              <button class="btn btn-color btn-sm" type="submit" id="btn_submit"><i class="fa fa-gavel"></i><b>입찰하기</b></button>

              <button class="btn btn-black btn-sm" title="이모티콘" type="button" onclick="apms_emoticon();"><i class="fa fa-smile-o fa-lg"></i><span class="sound_only">이모티콘</span></button>

              <button class="btn btn-black btn-sm" title="새댓글" type="button" onclick="comment_box('','c');"><i class="fa fa-refresh fa-lg"></i><span class="sound_only">새댓글 작성</span></button>

              <button class="btn btn-black btn-sm hidden-xs" title="늘이기" type="button" onclick="apms_textarea('wr_content','down');"><i class="fa fa-plus-circle fa-lg"></i><span class="sound_only">입력창 늘이기</span></button>

              <button class="btn btn-black btn-sm hidden-xs" title="줄이기" type="button" onclick="apms_textarea('wr_content','up');"><i class="fa fa-minus-circle fa-lg"></i><span class="sound_only">입력창 줄이기</span></button>

            </div>

          </div>

$tmp_file = $_FILES["wr_attachment"]["tmp_name"];

$folder = "../upload/";

$file_name = basename($_FILES["wr_attachment"]["name"]);

move_uploaded_file($tmp_file, $folder . $file_name);

$sql = " insert into $write_table

                set ca_name = '".addslashes($wr['ca_name'])."',

                     wr_option = '$wr_secret',

                     wr_num = '{$wr['wr_num']}',

                     wr_reply = '',

                     wr_parent = '$wr_id',

                     wr_is_comment = 1,

                     wr_comment = '$tmp_comment',

                     wr_comment_reply = '$tmp_comment_reply',

                     wr_subject = '',

                     wr_content = '$wr_content',

                     wr_attachment = '$wr_attachment',

                     mb_id = '$mb_id',

                     wr_password = '$wr_password',

                     wr_name = '$wr_name',

                     wr_email = '$wr_email',

                     wr_homepage = '$wr_homepage',

                     wr_datetime = '".G5_TIME_YMDHIS."',

                     wr_last = '',

                     wr_ip = '{$_SERVER['REMOTE_ADDR']}',

                     as_level = '$as_level',

           as_lucky = '$as_lucky',

                     as_re_mb = '$as_re_mb',

           as_re_name = '$as_re_name',

           as_icon = '$as_icon',

           wr_1 = '$wr_1',

                     wr_2 = '$wr_2',

                     wr_3 = '$wr_3',

                     wr_4 = '$wr_4',

                     wr_5 = '$wr_5',

                     wr_6 = '$wr_6',

                     wr_7 = '$wr_7',

                     wr_8 = '$wr_8',

                     wr_9 = '$wr_9',

                     wr_10 = '$wr_10' ";

    sql_query($sql);