I am building a new website that allows members to upload images. I am using a program called Gallery to build the site (I have got it working and set the site up). I have located a php script that allows users to upload an image. The form they need to complete will be very simple, but I want it to include their username without the need for manual input. The images will be uploaded directly to the server so I need to match up an image with the user who submitted it as there will be other information in the form that needs to be added alongside the image.

My question is; how do I do it?

I have been looking at cookies or sessions, but I could really do with some advice on the whole process.

I am also a little wary about security. The upload folder is password protected but I really think I should be doing more than just that. How can I protect myself against viruses etc?

Any help on this would be greatly appreciated, it is very much a work in progress at the moment....

EDIT - I have been thinking about this - could the ouput of the form create a html file containing the image and the form fields?