use is_uploaded_file()