class.upload.php is a powerful and mature PHP class to manage uploaded files, and manipulate images in many ways. The script is available under a GPL license.
more info about the class
Your system is unable to find out the MIME type of the file, so it cannot block a malicious file. Besides, you may have open_basedir enabled.