We check that via strlen() while never properly initializing it.
Attach a file by drag & drop or click to upload
