Generally you will have to store them in a BLOB field.
You will have to make sure the characters are properly escaped though. Each database server does this a bit differently.

Alternatively you could just save the file to a folder and keep a record of the folder you saved it in and the file's name.