random-radio-radio/webinterface/upload.php

<?php

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

    $uploaddir = getcwd() . '/uploads/';
    $uploadfile = $uploaddir . basename($_FILES['userfile']['name']);

    // TODO check file type

    if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
        echo json_encode("File is valid, and was successfully uploaded.\n");
    } else {
        echo json_encode( "Possible file upload attack!\n");
    }
}
?>