fix uploading and something aboout csrv attack