You can do it fairly easily I believe, a simple way would be using <TMPL_IF usr_mod> </TMPL_IF> to not show the upload area to anyone who isn't a moderator, you could then also go to the upload function in the index.cgi file and double check to make sure the uploader is a mod before uploading the fi...