I recently built a Downloads Manager that will debut though before I do so I want to know what file extensions I should explicitly disallow from being accepted?
Running LAMP/WAMP the most obvious I've come up with since the five minutes this issue came to mind:
The idea is to allow clients who use the software to build websites to host their own files directly so we want to allow them the flexibility while at the same time we're not a dedicated file hosting service. Here is a good article that I'm going to read more in-depth especially about the more obscure file extensions. I think the best bet there is to review allow extension association, disable everything except for what we use and still disallow those extensions from being uploaded.