Prevent multi upload with users

Hi
In my app,user can upload file to server with username and password
There are no any problem for upload or authentication
Big problem is
If user have username and password,can upload file with php script
Example
Post: username=user&password=1234 and contain file form

If hacker execute this url in php script,can upload file to server

How do i can prevent upload file only with app
Thanks