<script type="text/javascript">

var auth = "@(Request.Cookies[FormsAuthentication.FormsCookieName]==null ? string.Empty :
 Request.Cookies[FormsAuthentication.FormsCookieName].Value)";

    $(window).load(

    function () {

        $("#fileuploader").fileUpload({

            'uploader': '/Scripts/uploader.swf',

            'cancelImg': '/Images/cancel.png',

            'buttonText': 'Select Image',

            'script': 'Home/Upload',

            'folder': '/uploads',

            'fileDesc': 'Image Files',

            'fileExt': '*.jpg;*.jpeg;*.gif;*.png',

            'multi': true,

            'auto': true,

            scriptData: { token: auth }

        });

    }

);

    </script>

<div id="fileuploader"></div>

        [HttpPost]

        public string Upload(HttpPostedFileBase fileData, string token)

        {

            if (string.IsNullOrEmpty(token))

            {

                return "noLogin";

            }

            FormsAuthenticationTicket ticket = FormsAuthentication.Decrypt(token);

            if (ticket != null)

            {

                var identity = new FormsIdentity(ticket);

                if (identity.IsAuthenticated)

                {

                    var fileName = this.Server.MapPath("~/uploads/" + System.IO.Path.GetFileName(fileData.FileName));

                    fileData.SaveAs(fileName);

                }

            }

            return "ok";

        }