[firstChild]

вот мой PHP код

<?php 
$upload = $_FILES['upload']['tmp_name'];
$upload_name = $_FILES['upload']['name'];
$upload_size = $_FILES['upload']['size'];
$upload_type = $_FILES['upload']['type'];



if (move_uploaded_file($upload, $file_path = "/img/". basename($upload_name))) {
echo ' File is valid, and was successfully uploaded.';
} 
else 
{
echo 'Possible file upload attack!';
}
?>

но он мне всё равно пишет 'Possible file upload attack!
может я опять ошибся?