Just to say that you can also convert the files into base64 text strings on the client side using Javascript and send them in your form as just a text field, and you can email yourself those base64 strings, which you will need to convert back later, or if your mailclient is intelligent, it will autodetect attachments. (or mark the email as spam/virus).

But uploading the files to your server first, virus scan them, and only then email it to you when clean is safer...