hi,
take a look at a package from Jason Hunter..
http://www.servlets.com/cos/javadoc/com/oreilly/servlet/MultipartRequest.html You should assign "multipart/form-data" to the enctype attribute of the FORM tag! like this
<form enctype="multipart/form-data" action="blabla">
The file gets send to the client as a stream in the REQUEST, so there is no need to try and grab it from his HD yourself!
Take alook at how Jason does it, it's open source and try to figure out how you can do it to insert the retrieved file into the DB