Does anyone know the what is the risk to in upload file handle without using
is_upload_file() I read it in Php.net but not so sure.

I would like to read and extra explaination.

Thanks
Kun