https://www.sans.org/reading-room/whitepapers/testing/web-application-arbitrary-file-upload-vulnerabilities-36472