Fix in watchdog. Fix path to database. Check allowed-extension in upload method on client.