This is about the best non commercial extension in the category as it allows you to set the upload directory to a secure location (above public_html) on the server. There's a small compatability problem with the index.php hack used to insert the googlemaps plugin into contact form (makes the captcha image disappear).