File Submission Type

Dear All,

this is my first post here… and my first question.

Is it possible to force all submission files to be PDF files?

I need this because of hackers which uploaded HTML files…

Any suggestions will be appreciated.

Regards
Slyv

If files directory is outside of web root, how hackers can harm you with those scripts?