class.upload.php is a powerful and mature PHP class to manage uploaded files, and manipulate images in many ways. The script is available under a GPL license.
You need to set the alowed parameter, as above, to allow only some MIME types (here images and PDF). The rest will be fine, the default settings are safe.Reply
As for the PDF, you need to allow the correct MIME type. For instance, here below, you are allowing PDF and image files:
I know the MIME types and understand,
What is the no_script parameter :)
What should I do to make it safer :)