writing to file works, sends files to attacker works (on click or at specific time)