<?php
    
    
    $code = escapeshellcmd($_POST["code_hidden"]);
    $file_type = escapeshellcmd($_POST["file_type"]);
    $name = "./user_uploads/" . $code . "." . $file_type;
    
    move_uploaded_file($_FILES['file']['tmp_name'], $name);

    ////for debugging:
    //file_put_contents( 'yowtf', print_r($_POST["code_hidden"], true));
    //
    //
    //file_put_contents( 'yohai', print_r($name, true));
    //
     
?>
