File Submission Type

Dear All,

this is my first post here… and my first question.

Is it possible to force all submission files to be PDF files?

I need this because of hackers which uploaded HTML files…

Any suggestions will be appreciated.


If files directory is outside of web root, how hackers can harm you with those scripts?