https://www.machinet.net/tutorial-de/security-best-practices-for-html-file-uploads