https://10alert.com/pre-auth-arbitrary-file-upload-in-user-submitted-posts-plugin/