# Allow PDF Upload? is it secure?

**URL:** https://meta.discourse.org/t/allow-pdf-upload-is-it-secure/98096
**Category:** Feature
**Created:** [September 26, 2018, 10:08am UTC](https://meta.discourse.org/t/allow-pdf-upload-is-it-secure/98096 "2018-09-26T10:08:15Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Discoursecurious](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/discoursecurious/32/119542_2.png) [@Discoursecurious](https://meta.discourse.org/u/Discoursecurious)
#### Post date: [September 26, 2018, 10:08am UTC](https://meta.discourse.org/t/allow-pdf-upload-is-it-secure/98096/1 "2018-09-26T10:08:15Z")

</div>

Tried to drag and drop a file on the forum…

> Sorry, the file you are trying to upload is not authorized (authorized extensions: jpg, jpeg, png, gif).

Is it possible to allow PDF uploads? Will it pose security concerns?

---

<div class="post-metadata">

### Author: ![robmc](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/robmc/32/125900_2.png) [@robmc](https://meta.discourse.org/u/robmc)
#### Post date: [September 26, 2018, 10:12am UTC](https://meta.discourse.org/t/allow-pdf-upload-is-it-secure/98096/2 "2018-09-26T10:12:36Z")

</div>

If you want to allow PDF uploads you can configure this in your settings by searching for `authorized extensions`

 ![image](https://global.discourse-cdn.com/meta/original/3X/8/1/813d6321034e98a2347341fe625c88a8cdee8abe.png)

PDF should be secure but is not enabled by default since it is not necessarily required for regular conversation and these files could be very large, and therefore use up your storage space quite quickly, so you will need to monitor that.

If you want to make this more secure, and this is for site documentation, the you could allow PDFs only for staff

---

<div class="post-metadata">

### Author: ![Discoursecurious](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/discoursecurious/32/119542_2.png) [@Discoursecurious](https://meta.discourse.org/u/Discoursecurious)
#### Post date: [September 26, 2018, 10:35am UTC](https://meta.discourse.org/t/allow-pdf-upload-is-it-secure/98096/3 "2018-09-26T10:35:55Z")

</div>

> [@robmc](#):
>
> If you want to make this more secure, and this is for site documentation, the you could allow PDFs only for staff

great tip! Thank you!
