Upload API active at /api/upload.php