File upload

Hi,

I want to allow uploading files to my website. The uploaded file will be send to an email…

A couple of questions:

Is the uploaded file stored on the server?

To protect my website from viruses I only allow docx and pdf. What else should I do to make sure no viruses are uploaded?

Thanks