Extreme care should be used for scripts that allow uploading. In the wrong hands, it would allow someone to upload a file or files that could let the person take over your site, send out spam, etc. Such access should be limited by a good strong password.