class.upload.php is a powerful and mature PHP class to manage uploaded files, and manipulate images in many ways. The script is available under a GPL license.
more info about the class
I thought allow exec() would be a risk?!
So I can remove it from the array.