[rebel]

So out of curiosity, what would be the easiest way to securely accept file uploads? Taking into account all of the possible malicious attacks.

[BogdanCalin]

Host them on a separate domain like Google and Github does (eg. Google uses googleusercontent.com and Github uses githubusercontent.com).