title: What is a reasonable way to secure an asp:fileupload
body: <p>I just read this article: <a href="http://www.acunetix.com/websitesecurity/upload-forms-threat.htm" rel="nofollow">http://www.acunetix.com/websitesecurity/upload-forms-threat.htm</a> which discusses some of the security risks involved with allowing users to upload files to your webserver.</p>
  
  <p>I am currently working on an application page which will accept resumes (presumably office, pdf, open office docs, etc) using the asp:FileUpload control. I started with <s>blacklisting certain file</s> only allowing certain file extensions, and now after doing a bit of research I am wondering what are some other methods that are commonly used to increase security.</p>
  
  <p>In my case it is a asp.net 3.5 web application written in C#. Served by IIS7.5 running on Windows Server 2008r2.</p>