I have a webpage that accepts user uploads in xlsx and pdf format, and then saves them in an "uploads" folder. Im wondering if there might be any security issues with the uploads content (viruses, hacks, etc) that might compromise my servers safety, and if there are, how can i address the issue.

Im working with mysql and nodejs.

Thank you

CodePudding user response：

You need to check your content security policy to be sure, you likely need moderation/abuse, security controls on files, and you also need to take care how users upload files. This question could be called very broad.

That said there are a great number of problems that come with hosting user supplied files. You likely should have a security audit, make sure you can trace who is uploading, and understand the unit economics of allowing people to post things server side.

Since the question is broad, its hard to give a better answer..