$dir = 'c:/apache/htdocs/uploads/';
$file = $dir . basename($_FILES['FILENAME']['name']);
if (move_uploaded_file($_FILES['FILENAME']['tmp_name'], $file)) {
}
To upload start by using that. Change $dir to the EXACT path (not relative) to your upload folder, and change FILENAME to whatever the browse input field was on your form (it's name). This will upload the file. If you want to use more then one file on one form, just copy that again and change the variable names to like $dir2 and $file2 or something different.
Use if statements to check for the user (I assume you know how... if not post.. I have to be breif because school almost over and I have to catch the bus.
Then to insert the filename they just uploaded, use $FILES['FILENAME']['name'] for it's name. You can call it later by something like <img src="<?php echo "uploads/$FILES['FILENAME']['name']"; ?>
Sorry, bell rang, gotta go, ask any more questions and I'll help you out.