[rhizome]

Isn't it a reasonable workaround to scan the file for content-type and make the file available once it passes the criteria for the upload? Find a php file uploaded with an extension of .jpg? "Sorry, there was a problem with your file. Please try again."

[ubernostrum]

And then you run into polyglot files which are valid for multiple types...