<?php
    if (isset($_FILES['document']['name'])) {
            print "Formular wurde gesendet";
        }
    }
    else{
 
        $upload_key = $_GET["upload_key"];
 
        $sql = 'SELECT firstname, lastname
            FROM employee
            WHERE upload_key=\''.$upload_key.'\'';
 
        $res = mysql_query($sql);
        if (mysql_num_rows($res)==0){
              die("<p>Kein Eintrag gefunden</p>&quot<img src="typo3conf/ext/mm_forum//res/smilies/icon_wink.gif" alt="icon_wink.gif" />;
        }
 
        $row = mysql_fetch_assoc($res);
        $firstname = $row['firstname'];
        $lastname = $row['lastname'];       
?>
        <form method="post" enctype="multipart/form-data" action="">
            <input type="file" name="document" size="20"/>
            <input type="submit" value="Upload document" name="action"/>
        </form>
<?php
    }
?>

action="<?php echo $_SERVER['PHP_SELF'] ?>"