Block a user
Is the file name good enough?
Use
Content-type to infer filetype
Use
Content-type to infer filetype