don't allow users to upload files that don't match the paths extension

http://manage.dimagi.com/default.asp?63533#393887