refactor upload data format and add anti-fake-download