The GIF + PHP code article from yesterday generated some good email.  Here is a good document that explains some of the mitigation techniques and explains the problems in more detail:  http://www.scanit.be/uploads/php-file-upload.pdf