You can check the extension of the image and restrict only a particular type of image. But to restrict viruses you must use the Anti virus Software in server. If you have virus check in your project, then your project updating never come to an end.
Like the others I am struggling with your design. I agree with cybersofthari, any checking should be done on the server. Simple security measures are effective and that is why you don't hear of this being an issue on the net.
Comment