HOW TO BLOCK EXECUTABLE FILE UPLOADS IN PHP

Summary from the TLDR InfoSec newsletter

This post explains how you can prevent executable file uploads in PHP by calling a free API during the upload process that verifies file formats. By setting $allow_executables to false and optionally providing a $restrict_file_types whitelist, the API checks against 17+ million virus/malware signatures and rigorously verifies accepted formats, blocking executables and other threatening file types.