diff --git a/delete.php b/delete.php
index 9ba115acccd..66869e27663 100644
--- a/delete.php
+++ b/delete.php
@@ -50,26 +50,40 @@
     die("You don't have a valid session !");
 }
 
-    $file_index = (int)$_GET['file_index'];
-    $fieldname = $_GET['fieldname'];
-    $filename = "tmp/upload/".$_SESSION[$fieldname]['files'][$file_index]['filename'];
-    $name = $_SESSION[$fieldname]['files'][$file_index]['name'];
+    $sFieldname = $_GET['fieldname'];
+    $sFilename = sanitize_filename($_GET['filename']);
+    $sOriginalFileName=sanitize_filename($_GET['name']);
+    if (substr($sFilename,0,6)=='futmp_')
+    {
+        $sFileDir = $tempdir.'/upload/';
+    }
+    elseif(substr($sFilename,0,3)=='fu_'){
+        $sFileDir = "{$uploaddir}/surveys/{$surveyid}/files/";
+    }
+    else die('Invalid filename');
 
-    $fh = fopen($filename, 'w') or die("can't open file");
-    fclose($fh);
+    $sJSON = $_SESSION[$fieldname];
+    $aFiles = json_decode(stripslashes($sJSON),true);
 
-    if (unlink($filename))
-    {
-        echo sprintf($clang->gT('File %s deleted'), rawurldecode($name));
-        for ($i = $file_index; $i < $_SESSION[$fieldname]['filecount']; $i++)
+    if(substr($sFilename,0,3)=='fu_'){
+        $iFileIndex=0;
+        $found=false;
+        foreach ($aFiles as $aFile)
         {
-            $_SESSION[$fieldname]['files'][$i]['name'] = $_SESSION[$fieldname]['files'][$i + 1]['name'];
-            $_SESSION[$fieldname]['files'][$i]['size'] = $_SESSION[$fieldname]['files'][$i + 1]['size'];
-            $_SESSION[$fieldname]['files'][$i]['ext']  = $_SESSION[$fieldname]['files'][$i + 1]['ext'];
-            $_SESSION[$fieldname]['files'][$i]['filename']   = $_SESSION[$fieldname]['files'][$i + 1]['filename'];
+           if ($aFile['filename']==$sFilename)
+           {
+            $found=true;
+            break;
+           }
+           $iFileIndex++;
         }
-        $_SESSION[$fieldname]['files'][$_SESSION[$fieldname]['filecount']] = NULL;
-        $_SESSION[$fieldname]['filecount'] -= 1;
+        if ($found==true) unset($aFiles[$iFileIndex]);
+       $_SESSION[$fieldname] = json_encode($aFiles);
+    }
+
+    if (@unlink($sFileDir.$sFilename))
+    {
+       echo sprintf($clang->gT('File %s deleted'), $sOriginalFileName);
     }
     else
         echo $clang->gT('Oops, There was an error deleting the file');
diff --git a/qanda.php b/qanda.php
index 6386bda9bfa..dad8916e6b7 100644
--- a/qanda.php
+++ b/qanda.php
@@ -3804,9 +3804,8 @@ function do_file_upload($ia)
 
     $answer .= "<div id='".$ia[1]."_uploadedfiles'></div>";
 
-    //$answer .= '<br />Trouble uploading files? Try the <a href="#" onclick="showBasic()">Simple Uploader</a><div id="basic">'.$basic.'</div>';
-
     $answer .= '<script type="text/javascript">
+                    var surveyid = '.$surveyid.';
                     $(document).ready(function(){
                         var fieldname = "'.$ia[1].'";
                         var filecount = $("#"+fieldname+"_filecount").val();
diff --git a/save.php b/save.php
index 7c9e1d88e16..84c2bfc71f5 100644
--- a/save.php
+++ b/save.php
@@ -507,11 +507,12 @@ function createinsertquery()
 
                         for ($i = 0; $i < count($phparray); $i++)
                         {
-                            if (!rename($tmp . $phparray[$i]->filename, $target . $phparray[$i]->filename))
-                                echo "Error Moving file to its destination";
-
-                            $_SESSION[$value] = json_encode($phparray);
+                            $sDestinationFileName='fu_'.sRandomChars(15);
+                            if (!rename($tmp . $phparray[$i]->filename, $target . $sDestinationFileName))
+                                echo "Error moving file to its destination";
+                            $phparray[$i]->filename=$sDestinationFileName;
                         }
+                        $_SESSION[$value] = json_encode($phparray);
                     }
                     $values[] = $connect->qstr($_SESSION[$value], get_magic_quotes_gpc());
                     // filename is changed from undefined to a random value
diff --git a/scripts/modaldialog.js b/scripts/modaldialog.js
index 044f2d0b461..754bcfff686 100644
--- a/scripts/modaldialog.js
+++ b/scripts/modaldialog.js
@@ -16,13 +16,13 @@ $(function() {
         var buttonsOpts = {};
         buttonsOpts[translt.returnTxt] = function() {
                         // Fix for the IE bug 04965
-                        var pass; if(document.getElementById('uploader').contentDocument) {    if(document.getElementById('uploader').contentDocument.defaultView)    {       /*Firefox*/     pass=document.getElementById('uploader').contentDocument.defaultView.saveAndExit(fieldname,show_title,show_comment,pos);    }else{       /*IE8*/       pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos);    } }else{    /*IE6*/    pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos); } 
+                        var pass; if(document.getElementById('uploader').contentDocument) {    if(document.getElementById('uploader').contentDocument.defaultView)    {       /*Firefox*/     pass=document.getElementById('uploader').contentDocument.defaultView.saveAndExit(fieldname,show_title,show_comment,pos);    }else{       /*IE8*/       pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos);    } }else{    /*IE6*/    pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos); }
                         if (pass) {
                             $(this).dialog('destroy');
                             $('iframe#uploader').remove();
                         }
                     };
-        
+
         var horizontalPadding = 30;
         var verticalPadding = 20;
         $('#uploader').dialog('destroy'); // destroy the old modal dialog
@@ -41,7 +41,7 @@ $(function() {
                 draggable: true,
                 closeOnEscape: false,
                 beforeclose: function() {
-                        var pass; if(document.getElementById('uploader').contentDocument) {    if(document.getElementById('uploader').contentDocument.defaultView)    {       /*Firefox*/     pass=document.getElementById('uploader').contentDocument.defaultView.saveAndExit(fieldname,show_title,show_comment,pos);    }else{       /*IE8*/       pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos);    } }else{    /*IE6*/    pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos); } 
+                        var pass; if(document.getElementById('uploader').contentDocument) {    if(document.getElementById('uploader').contentDocument.defaultView)    {       /*Firefox*/     pass=document.getElementById('uploader').contentDocument.defaultView.saveAndExit(fieldname,show_title,show_comment,pos);    }else{       /*IE8*/       pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos);    } }else{    /*IE6*/    pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos); }
                             if (pass) {
                                 $(this).dialog('destroy');
                                 $('iframe#uploader').remove();
@@ -72,7 +72,7 @@ $(function() {
                 draggable: true,
                 closeOnEscape: false,
                 beforeclose: function() {
-                    var pass; if(document.getElementById('uploader').contentDocument) {    if(document.getElementById('uploader').contentDocument.defaultView)    {       /*Firefox*/     pass=document.getElementById('uploader').contentDocument.defaultView.saveAndExit(fieldname,show_title,show_comment,pos);    }else{       /*IE8*/       pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos);    } }else{    /*IE6*/    pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos); } 
+                    var pass; if(document.getElementById('uploader').contentDocument) {    if(document.getElementById('uploader').contentDocument.defaultView)    {       /*Firefox*/     pass=document.getElementById('uploader').contentDocument.defaultView.saveAndExit(fieldname,show_title,show_comment,pos);    }else{       /*IE8*/       pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos);    } }else{    /*IE6*/    pass=document.getElementById('uploader').contentWindow.saveAndExit(fieldname,show_title,show_comment,pos); }
                     return pass;
                 },
                 overlay: {
@@ -119,7 +119,7 @@ function displayUploadedFiles(jsonstring, filecount, fieldname, show_title, show
         $('#'+fieldname+'_uploadedfiles').html(display);
         return;
     }
-    
+
     if (jsonstring !== '')
     {
         jsonobj = eval('(' + jsonstring + ')');
@@ -136,7 +136,7 @@ function displayUploadedFiles(jsonstring, filecount, fieldname, show_title, show
             if (pos)
             {
                 if (isValueInArray(image_extensions, jsonobj[i].ext))
-                    display += '<tr><td><img src="uploader.php?filegetcontents='+decodeURIComponent(jsonobj[i].filename)+'" height=100px  align="center"/></td>';
+                    display += '<tr><td><img src="uploader.php?sid='+surveyid+'&amp;filegetcontents='+decodeURIComponent(jsonobj[i].filename)+'" height=100px  align="center"/></td>';
                 else
                     display += '<tr><td><img src="images/placeholder.png" height=100px  align="center"/></td>';
             }
@@ -162,7 +162,7 @@ function displayUploadedFiles(jsonstring, filecount, fieldname, show_title, show
 function copyJSON(jsonstring, filecount, fieldname, show_title, show_comment, pos) {
     $('#'+fieldname).val(jsonstring);
     $('#'+fieldname+'_filecount').val(filecount);
-    
+
     displayUploadedFiles(jsonstring, filecount, fieldname, show_title, show_comment, pos);
 }
 
diff --git a/scripts/uploader.js b/scripts/uploader.js
index 7ee4545bbde..6a11b6b2912 100644
--- a/scripts/uploader.js
+++ b/scripts/uploader.js
@@ -298,7 +298,8 @@ function deletefile(fieldname, count) {
                 $('#uploadstatus').html(translt.errorMoreAllowed.replace('%s',(maxfiles - filecount)));
         }
     }
-    file_index = $("#"+fieldname+"_file_index_"+count).val();
-    xmlhttp.open('GET','delete.php?sid='+surveyid+'&fieldname='+fieldname+'&file_index='+file_index, true);
+    filename=$("#"+fieldname+"_filename_"+count).val();
+    name=$("#"+fieldname+"_name_"+count).val();
+    xmlhttp.open('GET','delete.php?sid='+surveyid+'&fieldname='+fieldname+'&filename='+filename+'&name='+encodeURI(name), true);
     xmlhttp.send();
 }
\ No newline at end of file
diff --git a/upload.php b/upload.php
index 109c496301b..715eccb5d7f 100644
--- a/upload.php
+++ b/upload.php
@@ -59,7 +59,7 @@
     $baselang = GetBaseLanguageFromSurveyID($surveyid);
     $clang = new limesurvey_lang($baselang);
 
-    $randfilename = sRandomChars(15);
+    $randfilename = 'futmp_'.sRandomChars(15);
     $sTempUploadDir = $tempdir.'/upload/';
     $randfileloc = $sTempUploadDir . $randfilename;
     $filename = $_FILES['uploadfile']['name'];
@@ -105,14 +105,6 @@
 
         else if (move_uploaded_file($_FILES['uploadfile']['tmp_name'], $randfileloc))
         {
-            if (!isset($_SESSION[$fieldname]['filecount']))
-                $_SESSION[$fieldname]['filecount'] = 0;
-
-            $filecount = $_SESSION[$fieldname]['filecount'] += 1;
-            $_SESSION[$fieldname]['files'][$filecount]['name'] = rawurlencode(basename($filename));
-            $_SESSION[$fieldname]['files'][$filecount]['size'] = $size;
-            $_SESSION[$fieldname]['files'][$filecount]['ext']  = $ext;
-            $_SESSION[$fieldname]['files'][$filecount]['filename']   = $randfilename;
 
             $return = array(
                         "success"       => true,
@@ -150,19 +142,10 @@
         }
         elseif (move_uploaded_file($_FILES['uploadfile']['tmp_name'], $randfileloc))
         {
-            if (!isset($_SESSION[$fieldname]['filecount']))
-                $_SESSION[$fieldname]['filecount'] = 0;
-
-            $filecount = $_SESSION[$fieldname]['filecount'] += 1;
 
-            $_SESSION[$fieldname]['files'][$filecount]['name'] = rawurlencode(basename($filename));
-            $_SESSION[$fieldname]['files'][$filecount]['size'] = $size;
-            $_SESSION[$fieldname]['files'][$filecount]['ext']  = $ext;
-            $_SESSION[$fieldname]['files'][$filecount]['filename']   = $randfilename;
 
             $return = array(
                 "success" => true,
-                "file_index" => $filecount,
                 "size"    => $size,
                 "name"    => rawurlencode(basename($filename)),
                 "ext"     => $ext,
diff --git a/uploader.php b/uploader.php
index a62fd01e60b..e7752ce3348 100644
--- a/uploader.php
+++ b/uploader.php
@@ -1,127 +1,136 @@
-<?php
-require_once(dirname(__FILE__).'/classes/core/startup.php');
-require_once(dirname(__FILE__).'/config-defaults.php');
-require_once(dirname(__FILE__).'/common.php');
-require_once($homedir.'/classes/core/class.progressbar.php');
-require_once(dirname(__FILE__).'/classes/core/language.php');
-
-if (isset($_GET['filegetcontents']))
-{
-    $sFileName=sanitize_filename($_GET['filegetcontents'],true,true);
-    readfile($tempdir."/upload/".$sFileName);
-    exit();
-}
-
-if (!isset($surveyid))
-{
-    $surveyid=returnglobal('sid');
-}
-else
-{
-    //This next line ensures that the $surveyid value is never anything but a number.
-    $surveyid=sanitize_int($surveyid);
-}
-
-// Compute the Session name
-// Session name is based:
-// * on this specific limesurvey installation (Value SessionName in DB)
-// * on the surveyid (from Get or Post param). If no surveyid is given we are on the public surveys portal
-$usquery = "SELECT stg_value FROM ".db_table_name("settings_global")." where stg_name='SessionName'";
-$usresult = db_execute_assoc($usquery,'',true);          //Checked
-if ($usresult)
-{
-    $usrow = $usresult->FetchRow();
-    $stg_SessionName=$usrow['stg_value'];
-    if ($surveyid)
-    {
-        if (isset($_GET['preview']) && $_GET['preview'] == 1)
-        {
-            @session_name($stg_SessionName);
-        }
-        else
-        {
-            @session_name($stg_SessionName.'-runtime-'.$surveyid);
-        }
-    }
-    else
-    {
-        @session_name($stg_SessionName.'-runtime-publicportal');
-    }
-}
-else
-{
-    session_name("LimeSurveyRuntime-$surveyid");
-}
-session_set_cookie_params(0,$relativeurl.'/');
-@session_start();
-
-if (empty($_SESSION) || !isset($_SESSION['fieldname']))
-{
-    die("You don't have a valid session !");
-}
-
-$meta = '<script type="text/javascript">
-    var surveyid = "'.$surveyid.'";
-    var fieldname = "'.$_GET['fieldname'].'";
-    var questgrppreview  = '.$_GET['preview'].';
-</script>';
-
-$meta .='<script type="text/javascript" src="scripts/ajaxupload.js"></script>
-<script type="text/javascript" src="scripts/uploader.js"></script>
-<link type="text/css" href="scripts/uploader.css" rel="stylesheet" />';
-
-$baselang = GetBaseLanguageFromSurveyID($surveyid);
-$clang = new limesurvey_lang($baselang);
-
-$header = getHeader($meta);
-
-echo $header;
-
-echo "<script type='text/javascript'>
-        var translt = {
-             titleFld: '" . $clang->gT('Title','js') . "',
-             commentFld: '" . $clang->gT('Comment','js') . "',
-             errorNoMoreFiles: '" . $clang->gT('Sorry, no more files can be uploaded!','js') . "',
-             errorOnlyAllowed: '" . $clang->gT('Sorry, only %s files can be uploaded for this question!','js') . "',
-             uploading: '" . $clang->gT('Uploading','js') . "',
-             selectfile: '" . $clang->gT('Select file','js') . "',
-             errorNeedMore: '" . $clang->gT('Please upload %s more file(s).','js') . "',
-             errorMoreAllowed: '" . $clang->gT('If you wish, you may upload %s more file(s); else you may return back to survey.','js') . "',
-             errorMaxReached: '" . $clang->gT('The maximum number of files has been uploaded. You may return back to survey.','js') . "',
-             errorTooMuch: '" . $clang->gT('The maximum number of files has been uploaded. You may return back to survey.','js') . "',
-             errorNeedMoreConfirm: '" . $clang->gT("You need to upload %s more files for this question.\nAre you sure you want to exit?",'js') . "'
-            };
-    </script>\n";
-
-$fn = $_GET['fieldname'];
-$qid = $_GET['qid'];
-$qidattributes=getQuestionAttributes($qid);
-
-$body = '
-        <div id="notice"></div>
-        <input type="hidden" id="ia"                value="'.$fn.'" />
-        <input type="hidden" id="'.$fn.'_minfiles"          value="'.$qidattributes['min_num_of_files'].'" />
-        <input type="hidden" id="'.$fn.'_maxfiles"          value="'.$qidattributes['max_num_of_files'].'" />
-        <input type="hidden" id="'.$fn.'_maxfilesize"       value="'.$qidattributes['max_filesize'].'" />
-        <input type="hidden" id="'.$fn.'_allowed_filetypes" value="'.$qidattributes['allowed_filetypes'].'" />
-        <input type="hidden" id="preview"                   value="'.$_SESSION['preview'].'" />
-        <input type="hidden" id="'.$fn.'_show_comment"      value="'.$qidattributes['show_comment'].'" />
-        <input type="hidden" id="'.$fn.'_show_title"        value="'.$qidattributes['show_title'].'" />
-        <input type="hidden" id="'.$fn.'_licount"           value="0" />
-        <input type="hidden" id="'.$fn.'_filecount"         value="0" />
-
-        <!-- The upload button -->
-        <div align="center" class="upload-div">
-            <button id="button1" class="upload-button" type="button" >'.$clang->gT("Select file").'</button>
-        </div>
-
-        <p class="uploadmsg">'.sprintf($clang->gT("You can upload %s under %s KB each.",'js'),$qidattributes['allowed_filetypes'],$qidattributes['max_filesize']).'</p>
-        <div class="uploadstatus" id="uploadstatus"></div>
-
-        <!-- The list of uploaded files -->
-        <ul id="'.$fn.'_listfiles"></ul>
-
-    </body>
-</html>';
-echo $body;
+<?php
+require_once(dirname(__FILE__).'/classes/core/startup.php');
+require_once(dirname(__FILE__).'/config-defaults.php');
+require_once(dirname(__FILE__).'/common.php');
+require_once($homedir.'/classes/core/class.progressbar.php');
+require_once(dirname(__FILE__).'/classes/core/language.php');
+
+if (!isset($surveyid))
+{
+    $surveyid=returnglobal('sid');
+}
+else
+{
+    //This next line ensures that the $surveyid value is never anything but a number.
+    $surveyid=sanitize_int($surveyid);
+}
+
+if (isset($_GET['filegetcontents']))
+{
+    $sFileName=sanitize_filename($_GET['filegetcontents']);
+    if (substr($sFileName,0,6)=='futmp_')
+    {
+        $sFileDir = $tempdir.'/upload/';
+    }
+    elseif(substr($sFileName,0,3)=='fu_'){
+        $sFileDir = "{$uploaddir}/surveys/{$surveyid}/files/";
+    }
+    readfile($sFileDir.$sFileName);
+    exit();
+}
+
+
+
+// Compute the Session name
+// Session name is based:
+// * on this specific limesurvey installation (Value SessionName in DB)
+// * on the surveyid (from Get or Post param). If no surveyid is given we are on the public surveys portal
+$usquery = "SELECT stg_value FROM ".db_table_name("settings_global")." where stg_name='SessionName'";
+$usresult = db_execute_assoc($usquery,'',true);          //Checked
+if ($usresult)
+{
+    $usrow = $usresult->FetchRow();
+    $stg_SessionName=$usrow['stg_value'];
+    if ($surveyid)
+    {
+        if (isset($_GET['preview']) && $_GET['preview'] == 1)
+        {
+            @session_name($stg_SessionName);
+        }
+        else
+        {
+            @session_name($stg_SessionName.'-runtime-'.$surveyid);
+        }
+    }
+    else
+    {
+        @session_name($stg_SessionName.'-runtime-publicportal');
+    }
+}
+else
+{
+    session_name("LimeSurveyRuntime-$surveyid");
+}
+session_set_cookie_params(0,$relativeurl.'/');
+@session_start();
+
+if (empty($_SESSION) || !isset($_SESSION['fieldname']))
+{
+    die("You don't have a valid session !");
+}
+
+$meta = '<script type="text/javascript">
+    var surveyid = "'.$surveyid.'";
+    var fieldname = "'.$_GET['fieldname'].'";
+    var questgrppreview  = '.$_GET['preview'].';
+</script>';
+
+$meta .='<script type="text/javascript" src="scripts/ajaxupload.js"></script>
+<script type="text/javascript" src="scripts/uploader.js"></script>
+<link type="text/css" href="scripts/uploader.css" rel="stylesheet" />';
+
+$baselang = GetBaseLanguageFromSurveyID($surveyid);
+$clang = new limesurvey_lang($baselang);
+
+$header = getHeader($meta);
+
+echo $header;
+
+echo "<script type='text/javascript'>
+        var translt = {
+             titleFld: '" . $clang->gT('Title','js') . "',
+             commentFld: '" . $clang->gT('Comment','js') . "',
+             errorNoMoreFiles: '" . $clang->gT('Sorry, no more files can be uploaded!','js') . "',
+             errorOnlyAllowed: '" . $clang->gT('Sorry, only %s files can be uploaded for this question!','js') . "',
+             uploading: '" . $clang->gT('Uploading','js') . "',
+             selectfile: '" . $clang->gT('Select file','js') . "',
+             errorNeedMore: '" . $clang->gT('Please upload %s more file(s).','js') . "',
+             errorMoreAllowed: '" . $clang->gT('If you wish, you may upload %s more file(s); else you may return back to survey.','js') . "',
+             errorMaxReached: '" . $clang->gT('The maximum number of files has been uploaded. You may return back to survey.','js') . "',
+             errorTooMuch: '" . $clang->gT('The maximum number of files has been uploaded. You may return back to survey.','js') . "',
+             errorNeedMoreConfirm: '" . $clang->gT("You need to upload %s more files for this question.\nAre you sure you want to exit?",'js') . "'
+            };
+    </script>\n";
+
+$fn = $_GET['fieldname'];
+$qid = $_GET['qid'];
+$qidattributes=getQuestionAttributes($qid);
+
+$body = '
+        <div id="notice"></div>
+        <input type="hidden" id="ia"                value="'.$fn.'" />
+        <input type="hidden" id="'.$fn.'_minfiles"          value="'.$qidattributes['min_num_of_files'].'" />
+        <input type="hidden" id="'.$fn.'_maxfiles"          value="'.$qidattributes['max_num_of_files'].'" />
+        <input type="hidden" id="'.$fn.'_maxfilesize"       value="'.$qidattributes['max_filesize'].'" />
+        <input type="hidden" id="'.$fn.'_allowed_filetypes" value="'.$qidattributes['allowed_filetypes'].'" />
+        <input type="hidden" id="preview"                   value="'.$_SESSION['preview'].'" />
+        <input type="hidden" id="'.$fn.'_show_comment"      value="'.$qidattributes['show_comment'].'" />
+        <input type="hidden" id="'.$fn.'_show_title"        value="'.$qidattributes['show_title'].'" />
+        <input type="hidden" id="'.$fn.'_licount"           value="0" />
+        <input type="hidden" id="'.$fn.'_filecount"         value="0" />
+
+        <!-- The upload button -->
+        <div align="center" class="upload-div">
+            <button id="button1" class="upload-button" type="button" >'.$clang->gT("Select file").'</button>
+        </div>
+
+        <p class="uploadmsg">'.sprintf($clang->gT("You can upload %s under %s KB each.",'js'),$qidattributes['allowed_filetypes'],$qidattributes['max_filesize']).'</p>
+        <div class="uploadstatus" id="uploadstatus"></div>
+
+        <!-- The list of uploaded files -->
+        <ul id="'.$fn.'_listfiles"></ul>
+
+    </body>
+</html>';
+echo $body;
 ?>
\ No newline at end of file