[Kriza]

what's the best way to let a user upload files on the server other than ftp, and it should be secure and for one specific person?

[amenadiel]

you could make a custom template in vBulletin, restrict to a specific usergroup membrecy, and upload the file using something like the script I use to upload images:

let's say your authorized usergroup is number 50.

$vb_usergroups = explode(",", $vbulletin->userinfo['membergroupids']);
if (in_array(50, $vb_usergroups)) 
{
//#############upload code##############
echo '<form name="form1" enctype="multipart/form-data" method="post" action="processFiles.php"><p>';

  $uploadNeed = 20;
  for($x=0;$x<$uploadNeed;$x++){

echo '<input name="uploadFile'.$x.'" size="60" type="file" id="uploadFile'.$x.'"></p>';
  }

echo '<p><input name="uploadNeed" type="hidden" value="20">
    <input type="submit" name="Submit" value="Submit">
  </p>
</form>';

} else {
die('Not allowed to see this section');
}

The upload code points to a file called "processFiles.php" which content should be something like

$uploadNeed = $_POST['uploadNeed'];
for($x=0;$x<$uploadNeed;$x++){
$file_name = $_FILES['uploadFile'. $x]['name'];
// strip file_name of slashes
$file_name = stripslashes($file_name);

$file_name = str_replace("'","",$file_name);
$file_name = str_replace(" ","_",$file_name);
$file_name=time().'_'.$file_name;
$copy = copy($_FILES['uploadFile'. $x]['tmp_name'],$file_name);