show attachments
fix upload form