// Lets see if there is a description, if there is one, lets sanitize it.
  $descr = $_POST['descr'];
  $descr = sql_sant($descr);
  if ($descr == "")  
  {
  $descr = "There is no description for this image";
  }

<form method="post" enctype="multipart/form-data" action="upload.php">
  <b>Image: <br />
  <input type="file" name="uploadfile" size="30"> 
  <br />
  <br />Description (Optional):</b><br />
  <textarea rows="textarea" width="30" cols="30" name="descr"></textarea><br />
  <input type="hidden" name="MAX_FILE_SIZE" value="<?php echo $maxfilesize; ?>">
  <input type="submit" value="Upload Image" name="upload">
</form>