BIG FAT SECURITY WARNING.

Do not write this code yourself, and be sure that any script you do use sanity checks the names of the files, and is clever with passing the filename to the saving function. In addition, the script should be owned and run by a limited user, definately not root.

Otherwise you could end up with some loser uploading "myfakejpg.jpg;rm -rf *".....not a pretty sight.

Here is a good place to start looking.