I think you should edit this script so you can set like max filesize and file types allowed, or else this isnt secure at all.