This is just a private site for my friends so it will be pictures added by them it wont be crazy stuff on them. I want them to be able to upload without admin control.

Can I just take the upload portion and make it into a separate php file? where do I start

If it's only for your friends, wouldn't it be easier, if you just create a user with upload rights? Then they could upload with the same username and password. That would protect you, too, against visitors doing unwanted uploads. Remember a website is always public.