hacked form validation for user upload page