Use FileUpload control &RegularExpressionValidator to validate.
<asp:FileUpload ID="flUpld" runat="server" />
<asp:RegularExpressionValidator
id="RegularExpressionValidator1" runat="server"
ErrorMessage="Only PDF files are allowed!"
ValidationExpression="^(([a-zA-Z]:)|(\\{2}\w+)\$?)(\\(\w[\w].*))(.pdf|.PDF)$"
ControlToValidate="flUpld" CssClass="text-red"></asp:RegularExpressionValidator>