the admin has patched the bug in this script admin can select the upload file extension and he in default model phtml extension in allowed but admin can change it