title: Virus scan uploaded files
body: <p>I have a web application that will allow users to upload files to a web server that will then save them to a database. One of the security guys stated that all I will need to do is attempt to save the file to the web server which will kick off a virus scan. I can then delete the file and save it to the database. But, I have concerns about this:</p>
  
  <ol>
  <li>If I save a file temporally to the web server, will the file fail to save if a virus is found?
  
  <ul>
  <li>If it fails, what type of exception should I expect?</li>
  </ul></li>
  <li>Is it a better idea to run the virus scanner from the command line?</li>
  <li>Is this safe? Reading this post: <a href="https://stackoverflow.com/questions/12864441/file-upload-security-concern">File upload security Concern</a> I am concerned about this line: "Ensure that the directory you will save to is not readable by the web server, this way they don't upload a malware script and then execute it from their browser via an HTTP"</li>
  </ol>