https://www.sans.org/reading-room/whitepapers/testing/web-application-file-upload-vulnerabilities-36487