Legal use of user testimonials and photos on websites

Does anyone have experience using testimonials and photos from users on you website? Is their some sort of generic model/testimonial release form that we can have users sign to put their quotes and photos online or is it better to get their verbal consent and quickly throw it up on the site? Also is it common to pay users for letting you use their quote/picture?