phpfreak/Project-Pier — pull request #26 by SleepIT (2012-10-24 19:46:35+00:00)
Title: Update tools/upload.php

Verify user is logged in before uploading files to prevent remote code execution (http://packetstormsecurity.org/files/117070/projectpier-exec.txt)

I'm positive there is a better way to accomplish this but this is what I'm using in the interim.