Can't Prevent Uploads

<?php

session_start();

function CheckAuthentication()
{
   if(!isset($_SESSION['osCAdminID']))
      return true;
      else
      return false;
}

// LicenseKey : Paste your license key here. If left blank, CKFinder will be fully functional, in demo mode.
$config['LicenseName'] = '';
$config['LicenseKey'] = '';

$baseUrl = '/ckfinder/userfiles/';

$baseDir = resolveUrl($baseUrl);

$config['Thumbnails'] = Array(
      'url' => $baseUrl . '_thumbs',
      'directory' => $baseDir . '_thumbs',
      'enabled' => true,
      'directAccess' => false,
      'maxWidth' => 100,
      'maxHeight' => 100,
      'bmpSupported' => false,
      'quality' => 80);

$config['Images'] = Array(
      'maxWidth' => 1600,
      'maxHeight' => 1200,
      'quality' => 80);

$config['RoleSessionVar'] = 'CKFinder_UserRole';

$config['AccessControl'][] = Array(
      'role' => '*',
      'resourceType' => '*',
      'folder' => '/',

      'folderView' => true,
      'folderCreate' => true,
      'folderRename' => true,
      'folderDelete' => true,

      'fileView' => true,
      'fileUpload' => true,
      'fileRename' => true,
      'fileDelete' => true);

$config['DefaultResourceTypes'] = '';

$config['ResourceType'][] = Array(
      'name' => 'Files',            // Single quotes not allowed
      'url' => $baseUrl . 'files',
      'directory' => $baseDir . 'files',
      'maxSize' => 0,
      'allowedExtensions' => '7z,aiff,asf,avi,bmp,csv,doc,fla,flv,gif,gz,gzip,jpeg,jpg,mid,mov,mp3,mp4,mpc,mpeg,mpg,ods,odt,pdf,png,ppt,pxd,qt,ram,rar,rm,rmi,rmvb,rtf,sdc,sitd,swf,sxc,sxw,tar,tgz,tif,tiff,txt,vsd,wav,wma,wmv,xls,zip',
      'deniedExtensions' => '');

$config['ResourceType'][] = Array(
      'name' => 'Images',
      'url' => $baseUrl . 'images',
      'directory' => $baseDir . 'images',
      'maxSize' => 0,
      'allowedExtensions' => 'bmp,gif,jpeg,jpg,png',
      'deniedExtensions' => '');

$config['ResourceType'][] = Array(
      'name' => 'Flash',
      'url' => $baseUrl . 'flash',
      'directory' => $baseDir . 'flash',
      'maxSize' => 0,
      'allowedExtensions' => 'swf,flv',
      'deniedExtensions' => '');

$config['CheckDoubleExtension'] = true;
$config['FilesystemEncoding'] = 'UTF-8';
$config['SecureImageUploads'] = true;
$config['CheckSizeAfterScaling'] = true;
$config['HtmlExtensions'] = array('html', 'htm', 'xml', 'js');
$config['HideFolders'] = Array(".svn", "CVS");
$config['HideFiles'] = Array(".*");
$config['ChmodFiles'] = 0755 ;
$config['ChmodFolders'] = 0755 ;
$config['ForceAscii'] = false;