Securing attachments folder, allowing only images direct access
Preventing double file extension upload