As Craig stated, the one way you can do this is to store the details of each upload in the database (which I would recommend) and have an additional column that stores if it is approved or not. If you don't want to store the details in a database, you will have to upload to a directory and then once the image is approved copy it over to the user directory to display.