Question

Suppose we have a example.exe file.
we first put that file in a new folder
and then zip that folder with any zipping software,
Can we prevent that zipped folder upload in a website?
how can we do that?

Answer 1

You cannot prevent it, because you can’t tell what the browser is going to submit before it submits it. All you can do is when the file arrives on the server, check the file extension – if it’s an exe (or a .zip and you open it up and find an .exe) then reject it.

You can use something like SWFupload to get a handle on the file before it’s uploaded, but the best that’ll do is tell you the name of the file.

Besides, they could just take "example.exe" change the name to "example.txt" and still upload it…