You can turn off authentication for upload.php. Just put code below in an .htaccess file in the same directory:

<Files "upload.php">
Satisfy Any
</Files>