fix exploit in uploadify