Very good example of the wrong way to handle file upload in PHP:

$copy = copy($tmp_file,$upl_path.$file_name);

P.S. http://ru.php.net/move_uploaded_file

Simple, yes. Secure, no. Neither file size nor file extensions will be checked before uploading. Don't use this script in public directories, cause the upload of own PHP scripts is possible which can be very dangerous.