Fixed a possible Injection attempt. Added Mime-type checking.