This endpoint takes ?field2_name=<file>. The page that calls it is rat.php.