file zip upload, forbid .ini