My .Net application allows file uploads to a specific folder in web server and there is a file extension check before file upload which allows only excel file types.
My query is whether this measure is completely secure and there is no possiblity for malicious users to upload any script files into system?
If answer is No, can someone please guide how to control upload of any specific file type or some way to prevent the execution of script file from a specific folder.
Thanks.
...
Go to the complete details ...