Nice post from the SANS Application Security Street Fighter Blog.

8 Basic rules to implement secure file uploads.