That's precisely what I do. You probably also want to scan the files for viruses at the time of upload and at regular intervals. I use ClamAV and F-Prot.