diff --git a/pages/php-ofc-library/exclude.txt b/pages/php-ofc-library/exclude.txt
new file mode 100644
index 000000000..c54d6c110
--- /dev/null
+++ b/pages/php-ofc-library/exclude.txt
@@ -0,0 +1,5 @@
+#
+# The following source is not part of the buid, event though it's a standard file from php-ofc-library
+# but: 1) it is not used by iTop and 2) it causes a security/vulnerability issue by allowing file uploads to anywhere
+#
+ofc_upload_image.php