note 30658 deleted from features.file-upload by googleguy

Note Submitter: diegoful at yahoo dot com ---- SECURITY CONSIDERATION: If you are saving all uploaded files to a directory accesible with an URL, remember to filter files not only by mime-type (e.g. image/gif), but also by extension. The mime-type is reported by the client, if you trust him, he can upload a php file as an image and then request it, executing malicious code. I hope I am not giving hackers a good idea anymore than I am giving it to good-intended developers. Cheers.