Can't we restrict the upload restrict with the theme having PHP notice? https://themes.svn.wordpress.org/ynet-contractor/1.0/