first you only allow pdf, txt and doc or docx documents setting the mime tipes in your php script tu upload docs, and if is posible try using a server base antivirus if your server have one
If your host have control panel, enter to your file manager browse to the indicate directory and set the persmissions to 755 or 775 whit this permissions are not critial.
Or you try changin permissions whith your ftp client e.g. Filazilla
hi all , its possible disable the custom header and set only in the default.css without creating a functions.php or without creating a child theme? my reasson is simple with more files and more heavy files the website is more slow for lowers conections. Thanks