Check MIME type, actual file format, upload restrictions and server security rules rather than relying only on the filename extension.