Apparently some students are not mature enough and we need some kind of protection. I'm thinking about protection in the PHP script to allow, for example, only ten requests in ten seconds. We can think about the exact rules.
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information