Issue regarding file extension filtering in uploading

[nevercodecorrect]

Describe the bug In code here, it uses the user provided file name. It might be bypassed by manipulating the file extension. Using methods like checking magic code instead of relying on extension would be better.