How can i accept all the file types except for dangerous file extensions in HTML

Question

I have seen the accept="images/png, videos/*" something like that, but it just take the images videos audios and some stuff, how can i exclude those dangerous file extensions like .EXE .COM .DOCM .scr .hta and more...

please help me im newbie here

http://stackoverflow.com/questions/254184/filter-extensions-in-html-form-upload — sdabet, Jul 04 '14 at 07:30
possible duplicate of [File input 'accept' attribute - is it useful?](http://stackoverflow.com/questions/181214/file-input-accept-attribute-is-it-useful) — Liam, Jul 04 '14 at 08:32
Im sorry for this post, i've got my answer from fiddler now.. thank you for all of your concerns :) very very sorry i don't know how to close this thread though... me newbie... — DarkDaryl, Jul 05 '14 at 05:49

score 0 · Accepted Answer · answered Jul 04 '14 at 07:29

0

You cannot restrict input files with html. This can only be done on server side. accept value is can easily be modified on client side.

answered Jul 04 '14 at 07:29

Vlas Bashynskyi

1,886
2
16
25

You could also have some javascript validation – sdabet Jul 04 '14 at 07:31
@fiddler any javascript validation can be easily overcome... – Jul 04 '14 at 07:45

How can i accept all the file types except for dangerous file extensions in HTML

1 Answers1