title: How to make a safe file upload script in php?
body: <p>i check the file for its extension, and mime type - is there anything else i can be doing to help make file uploads safer?</p>
  
  <p>its for an avatar (so all the images are in one folder). i was thinking about using htaccess to forbid any php execution just incase some php file found its way in there. what do you think?</p>