[vgallur]

Another approach: http://nullcandy.com/php-image-upload-security-how-not-to-do...

[sarciszewski]

The advice in the NullCandy article is entirely Apache dependent, while the advice in the Paragon article works regardless of your chosen webserver.