Update upload.php

added viewing of permitted filetypes.