There has been many discussions over this subject in the past. Maybe you can get some help by looking at on of theese:
File Upload To Selected Directory
Uploading a file
File Upload Security Question
File Upload + recording "metadata"
Upload images via browser ???


/brother t0mas