/actions/avatar/
../
crop.php
remove.php
upload.php