Hi barnameha,
We did not use the same way to achieve the upload function. The php uploader needs to provide the more powerful functions, so it needs more permission too.
Regards,
Ken