upload not working...

I thing we have some injection problem