added basic file upload security