add upload.cgi