Uploading, now with less reverse directory traversal...