note that blindly trusting the name/extension of the file has security ramifications if you don't know what you are doing (and even if the extension is correct, e.g. if you upload a php file to a php enabled server). It is expected you know what you are doing since you have full control of the server.