Along with "not checking what happens when you open()" you're also not checking what happens when you do your SQL execute.

$sth->execute($file_id,$xmlfile_contents) || die $sth->errstr; is what you want, I think.

But it's probably going to be answered by checking the open call. What's your working directory, for a start?