File safe download to server

[orion_rus]

I have a simple form where with multipart/ecnryption loads a file to a server. Any user can make so.
I need to know is it safe? or i need to make some restriction to this download, or may be remove it at all, to prevent hacking my site?
Any decisions would be great
Thanks in advance

[coopster]

No, not very safe. If you allowed me to upload a script I could process it and run whatever I want. Allowing file uploads is a very touchy area. Normally it is only for authenticated users and you check the uploads for many, many things, including MIME-type, file extensions, permissions, etc. A quick search should turn up quite a few security risks involved with file uploads.