And finally restrict to upload folder (by default).