* htdocs/document/upload.php: avoid checking filenames because PHP does that for
  us apparently