What is to stop somebody uploading a file that does not contain what is says it contains.

 

It seems that you can only specify file type by extension (for example jpg) but what is to stop somebody uploading sdfsdf.txt.jpg which is just a renamed text file.

 

Is there any way to check content type of the file before upload?

 

JG