Does AJAX Uploader validate against MIME types , or does it ONLY look at file extensions?    In other words,  if I want to limit me control to only upload GIFs,  and someone takes an executable virus EXE file, renames it to harmless.GIF, can they upload that file to the site?   Or, is there a way to have AJAX ...