Really disabling CSRF
Better structure for templates
Adding file upload script