File uploading is not exactly a safe thing to do. That doesn't mean one shouldn't do it -- this just means that one shouldn't expect to find a script that handles uploads for their needs in a secure manner. We often use the phrase "don't reinvent the wheel" around here a lot -- but this is one wheel that has too many specific security concerns to be only rolled once. As such, i recommend that you first study what is required to make file upload work. merlyn has an old Web Techniques article that may be of use to you. You won't be able to use the code, but you should be able to learn from it. Good luck! :)

L-LL-L--L-LL-L--L-LL-L--
-R--R-RR-R--R-RR-R--R-RR
B--B--B--B--B--B--B--B--
H---H---H---H---H---H---
(the triplet paradiddle with high-hat)