⚠️ INTENTIONALLY VULNERABLE — training lab only. This uploader accepts any file type (including .php shells) with no validation.