diff --git a/flaskfdx/dashboard.py b/flaskfdx/dashboard.py
index 8fa1de2..463f1f7 100644
--- a/flaskfdx/dashboard.py
+++ b/flaskfdx/dashboard.py
@@ -2,7 +2,7 @@ import functools
 import os
 
 from flask import(
-    Blueprint, flash, g, redirect, render_template, request, session, url_for
+    Blueprint, current_app, flash, g, redirect, render_template, request, session, url_for
 )
 from werkzeug.exceptions import abort
 from werkzeug.utils import secure_filename
@@ -50,6 +50,10 @@ def index():
 
     return render_template('dashboard/index.html', lastseven=lastseven)
 
+def allowed_file(filename):
+    ALLOWED_EXTENSIONS = {'xls', 'xlsx'}
+    return '.' in filename and filename.rsplit('.', 1)[1].lower() in ALLOWED_EXTENSIONS
+
 @bp.route('/upload', methods=('GET', 'POST'))
 @login_required
 def upload():
@@ -62,10 +66,8 @@ def upload():
         if file.filename == '':
             flash('No selected file')
             return redirect(request.url)
-        return redirect(url_for('index'))
         if file and allowed_file(file.filename):
             filename = secure_filename(file.filename)
-            file
-        
-
+            file.save(os.path.join(current_app.config['UPLOAD_FOLDER'], filename))
+        return redirect(url_for('index'))
     return render_template('dashboard/upload.html')