How to escape the upload function???