Also, (base, 'havalite', 'upload.php') isn't actually a good idea because 'havalite' should not be hardcoded since that part is configurable :-)