Prevent multi upload with users

Post: username=user&password=1234 and contain file form

Are username and password on the URL - www.mydomain.com/upload/?username=user&password=1234

Or you mean when user makes a POST request, effectively they are posting their username and password at the same time as the file?

Yes make a POST request
However i encrypt data with AES but we assume it is not encryption