i believe it is all managed through php, and levels upload how you do at the end (correct me if im wrong) although to me this always seemed like there would be some security issues that way.