https://sawmj.github.io/posts/DoS-via-abusing-the-Upload-Function/