HTTP 200
{"success":false,"data":{"message":"File type not allowed (server-side allowlist).","name":"payload.phtml","ext":"phtml"}}