By default WordPress restricts the file types that can be uploaded to
/uploads using the default Media Manager. I know it is possible to manually extend the allowed file types. I also know it is possible to change
functions.php to allow all file types to be uploaded.
This restriction obviously exists for security concerns - e.g. someone could upload a harmful
Would it not be possible to allow secure upload of all filetypes by setting the permissions of the
/uploads directory to prevent execution of any of its contents? Thus it wouldn't matter if someone uploaded a harmful file because it would not be executable on the server...