FORMAT QUERY SIMPAN DAN LOGIN

LOGIN.PHP
<?php
include "koneksi.php";
$id=$_POST["user"];
$pw=$_POST["snd"];
$sql="select * from tb_operator where user_id='$id' and sandi='$pw'";
//echo "$sql<br>";
$data = mysql_query($sql);
$jr = mysql_num_rows($data);
//echo "$jr<br>";
if($jr==0){
header("location:login.php");
} else{
header("location:tampil.php");
}
?>

SIMPAN.PHP
<?php
include"koneksi.php";
$kdbrg=$_POST["kdbrg"];
$nmbrg=$_POST["nmbrg"];
$hsbrg=$_POST["hsbrg"];
$jmbrg=$_POST["jmbrg"];
$nmfile=$_FILES["myfileku"]["name"];
echo "namafile=$nmfile<br>";
$path="images/".$nmfile;
//copy ($_FILES ["myfile"]["tmp_name"], $path) or die ("gagal mengupload");
$sql="insert into tb_barang values('$kdbrg','$nmbrg',$hsbrg,$jmbrg,'$nmfile')";
//mysql_query($sql);
//header("location:tampilbrg.php");

?>