add check upload path, add can exec