upload.php browse bug

The variable <code>$path</code> has a filter bug,
the attacker can browse other directory when he send "....//....//" to server.