Additional Comment:

• Always validate file types on the server side, not just client side, to prevent bypassing checks.
• Sanitize file names to remove potentially harmful characters and avoid directory traversal attacks.
• Set a maximum file size limit to prevent denial-of-service attacks through large file uploads.
• Use a dedicated directory for uploads with restricted permissions to minimize exposure.
• Implement virus scanning on uploaded files to detect and mitigate malware threats.

✅ Answered with Security best practices.