rendered paste body// Lets see if there is a description, if there is one, lets sanitize it.
$descr = $_POST['descr'];
$descr = sql_sant($descr);
if ($descr == "")
{
$descr = "There is no description for this image";
}
<form method="post" enctype="multipart/form-data" action="upload.php">
<b>Image: <br />
<input type="file" name="uploadfile" size="30">
<br />
<br />Description (Optional):</b><br />
<textarea rows="textarea" width="30" cols="30" name="descr"></textarea><br />
<input type="hidden" name="MAX_FILE_SIZE" value="<?php echo $maxfilesize; ?>">
<input type="submit" value="Upload Image" name="upload">
</form>