I've used this Java applet to let clients upload files to our work website -

http://www.javaatwork.com/ftp-java-u...t/details.html

It's an FTP client so it allows large files that wouldn't work through a form posting. You can restrict files by type (not sure if it's just suffix or full mime-type) for some security.

If you use an FTP user with limited privelages i.e write and no read and only with access to a certain directory it should be reasonably secure. Couple that with only providing access to the applet through an area which requires them to be logged in and there is a level of traceability.

The biggest downfall of this applet if needing to put the host, login and password into the parameters. It's encrypted, but if you let it loose to the general public, I'm sure someone would reverse the password.

Cheers,
Niggles