We recently got our servers into SVN which has been great, but this causes a lot of problems when using things like WP Filebase for CMS file management. It's also hard to keep the uploads folder synced, so we would like to turn off SVN for select directories. This leads me to the question at hand:
If we disallow a file type (php) in certain directories and someone uploads a shell script disguised as a .jpg or other file type that unpacks itself into a .php file, will that file actually unpack? Or will it unpack and just not execute? I'm not sure how folder security/permissions options work at this level.
Currently using IIS, though will likely be moving to a linux box soon.