[
  {
    "id": "UPLOAD001",
    "pattern": "move_uploaded_file\\s*\\([^,]+,\\s*\\$[^)]*['\"]\\s*\\.\\s*\\$_FILES",
    "flags": "i",
    "category": "file_upload",
    "description": "PHP file upload: move_uploaded_file with original filename (no extension check)",
    "language": [
      "php"
    ],
    "severity": "medium"
  },
  {
    "id": "UPLOAD002",
    "pattern": "move_uploaded_file\\s*\\(\\s*\\$_FILES\\[",
    "flags": "i",
    "category": "file_upload",
    "description": "PHP file upload: move_uploaded_file with original filename (no extension check)",
    "language": [
      "php"
    ],
    "severity": "medium"
  },
  {
    "id": "UPLOAD003",
    "pattern": "move_uploaded_file\\s*\\([^)]*\\$(?:destination|target_file|dest|path)",
    "flags": "i",
    "category": "file_upload",
    "description": "PHP file upload: move_uploaded_file with original filename (no extension check)",
    "language": [
      "php"
    ],
    "severity": "medium"
  },
  {
    "id": "UPLOAD004",
    "pattern": "\\$_FILES\\[['\"]\\w+['\"]\\]\\[['\"](?:name|tmp_name)['\"]\\]",
    "flags": "i",
    "category": "file_upload",
    "description": "PHP file upload: move_uploaded_file with original filename (no extension check)",
    "language": [
      "php"
    ],
    "severity": "medium"
  }
]