# The Secure Code Review Challenge — Solution #6: FileDrop (Username Is User Input Too)

**URL:** <https://threatmodelingconnect.discourse.group/t/the-secure-code-review-challenge-solution-6-filedrop-username-is-user-input-too/1275>\
**Category:** General\
**Created:** [October 1, 2026, 4:49pm UTC](https://threatmodelingconnect.discourse.group/t/the-secure-code-review-challenge-solution-6-filedrop-username-is-user-input-too/1275 "2026-10-01T16:49:14Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mohamed\_AboElKheir](https://sea2.discourse-cdn.com/flex002/user_avatar/threatmodelingconnect.discourse.group/mohamed_aboelkheir/32/179_2.png) [@Mohamed\_AboElKheir](https://threatmodelingconnect.discourse.group/u/Mohamed_AboElKheir)\
**Post date:** [October 1, 2026, 4:49pm UTC](https://threatmodelingconnect.discourse.group/t/the-secure-code-review-challenge-solution-6-filedrop-username-is-user-input-too/1275/1 "2026-10-01T16:49:14Z")

</div>

Hi all, the solution to challenge #6 of the Secure Code Review Challenge and its video walkthrough are both live. Challenge #7 is live too.

Video walkthrough: [https://youtu.be/MtdA7yUSzVg](https://youtu.be/MtdA7yUSzVg)  
Solution #6: [the-secure-code-review-challenge/solutions/006-filedrop/SOLUTION.md at main · mohamed-osama-aboelkheir/the-secure-code-review-challenge · GitHub](https://github.com/mohamed-osama-aboelkheir/the-secure-code-review-challenge/blob/main/solutions/006-filedrop/SOLUTION.md)  
Challenge #7: [the-secure-code-review-challenge/challenges/007-blogger at main · mohamed-osama-aboelkheir/the-secure-code-review-challenge · GitHub](https://github.com/mohamed-osama-aboelkheir/the-secure-code-review-challenge/tree/main/challenges/007-blogger)  
Repo: [GitHub - mohamed-osama-aboelkheir/the-secure-code-review-challenge: A biweekly secure code review challenge series, full working apps, based on real-world vulnerabilities. · GitHub](https://github.com/mohamed-osama-aboelkheir/the-secure-code-review-challenge)