I'm trying to figure out which method I should use to control script/file execution security.
I'm trying to protect against malicious file upload/execution exploits where a user could potentially upload something bad and then execute it on my website.
What's the best way to protect against this? I only want certain files to be able to execute.
Should I consider taking a whitelist (only allow my files in a directory) or blacklist (based on file extension) approach?