diff --git a/parts/server.py b/parts/server.py
index be17928..0bdc98d 100644
--- a/parts/server.py
+++ b/parts/server.py
@@ -197,10 +197,10 @@ def getMap(containerID):
 
 @app.route('/parts/getfile/<filename>')
 def getfile(filename):
-    if(re.match('^[\w\-_]+$', filename) == None):
+    if(re.match('^[\w\-_]+.[p|P][d|D][f|F]$', filename) == None):
         return 'No injections pls.'
 
-    return send_from_directory('/srv/datasheets/', filename + '.pdf')
+    return send_from_directory('/srv/datasheets/', filename)
 
 @app.route('/parts/alter/<partID>', methods=['POST'])
 @requires_auth
diff --git a/parts/static/script.js b/parts/static/script.js
index 83a7bd8..0195bc0 100644
--- a/parts/static/script.js
+++ b/parts/static/script.js
@@ -1,3 +1,5 @@
+var active_timer = 100;
+
 function init_edit(partID) {
 	$('table#details tr#location td p').hide();
 	$('#location-dropdown').show();
@@ -254,7 +256,8 @@ function octopartFetch(){
 $(document).ready(function() {
     $.ajaxSetup({ cache: false });
     $('.search-bar').on('keyup', function() {
-			perform_query();
+    		clearTimeout(active_timer);
+    		active_timer = setTimeout(perform_query, 100);
     });
     $('.checkbox').change( function() {
         if (   !$('#location').is(':checked')