I'm trying to lock down a lot of things in our PHP/Apache based servers, such as accurately logging all the avenues someone can use to place a file in their account.
For example,
1. wrappers around wget, curl, lynx, etc
2. Additional control panel logging with regards to uploads
3. Verbose FTP logs

One thing I can't seem to find is a way to log all the files that are handled by PHP's upload functions. I just want it to write to a certain file whenever these things are done.
A daemon will be running to monitor all upload-related logfiles, to perform scans on the contents and hash-based matches against known malicious file signatures.

This is all great, but I really don't know how to get php to log uploads unless I get down and dirty with the source code.

I guess I could make a mod_security rule that checks POST submissions, tries to determine if a file is being uploaded, maybe invokes the file checking daemon, and silently logs it, but I dunno.

Anyone have any ideas?

I can't think of any way to do that without hacking the code, which should be simple, though might incur a lot of overhead (fopen/write/fclose).