'Safe' files to upload

[kylua]

Hi everyone

I am setting a profile site where people can upload their CVs etc. I don't wish to put many restrictions on what they upload as it could be used by groups with their own preferences etc such as PagePlus rather than Word.

But obviously, I don't want them uploading files that could damage the site and also prevent obvious viruses.

I am preventing them from uploading .exes and .dlls but would like to know what other high risk file types there are that I can screen for on the extension.

Obviously, Word Docs etc can carry viruses, and I will have to include warnings, (and disclaimers), within the site to the people who download the files.

Many thanks for any help

Colin

 

[rn4it]

What might be better is have an up to date anti virus software running on that server, but you could also block javascript.

 

[Grenage]

Well what you could do is white list rather than black list file types, and choose only those which you know to be safe.

You could always have a contact address where people may request new file types.

 

[Xemus]

Either way, it's going to be a long list.
Here's CKNOW's version of the bad file extensions.

http://www.cknow.com/vtutor/vtextensions.htm

http://www.closedsocket.com