I agree with the other comment that generating this on the server is a security flaw.
That being said, I thought I would give it a try.
The manual verification process doesn't give me any files to upload. FTP is disabled.
(I am using Palemoon, if that matters)