If you have a file upload kind then you need to take care of all files with good suspicion. When you are allowing for users to upload images, you cannot count on the file extension or even the mime style to confirm that the file is a picture as these http://010-2140-086269235.bloggosite.com/938040/a-review-of-sport-toto