I don't know how much you know about CGI programming and file uploads, but in any case you might check out our own Ovid's CGI tutorial. He addresses security concerns, and things to watch out for.