@Grotfang: I have now made the entire process visible, you can Rash upload.php, uploaoder.php and viewSrc.php to view the source of the php scripts that drive the server side file saving and such.
Also, I added a preference that will not allow scripts that have just been downloaded to run, the...