in reply to Help make upload from web secure

I would suggest perlman:perlsec, which contains all that I could say on the topic and more.

stephen