- <?php  
- // In PHP 4.1.0 or later, $_FILES should be used instead of $HTTP_POST_FILES. 
- if (is_uploaded_file($HTTP_POST_FILES['userfile']['tmp_name'])) { 
-     copy($HTTP_POST_FILES['userfile']['tmp_name'], "/place/to/put/uploaded/file"); 
- } else { 
-     echo "Possible file upload attack. Filename: " . $HTTP_POST_FILES['userfile']['name']; 
- } 
- ?> 
-