upload path added to sec