It's done by using a script,
http://www.w3schools.com/php/php_file_upload.asp gives an overview of the PHP.
The site owner could then login with FTP and download and delete the files.
One thing is that if you store the uploaded files in the web root then if you are not careful anyone in the world can potentially download them.