Better (safer!) PHP-handling of file upload.