05: A note on best practices / security when handling file uploads