Here is all you need to allow users to upload:
http://www.freeaspupload.net/

Of course, the folder where the files are stored needs to have the proper permissions set.