verify upload file types before uploading