file upload: how can I check format?

[raffael3d]

Ok I have a file upload at my page. now i want to check if people are uploading the right stuff. they are allowed to uplad Vbscripts so I want to check if it is a .vbs file and not an .exe file
how can I verify that?

[Weedpacket]

Either the obvious method of checking the extension (.vbs vs. .exe) or examining the file itself to see if it contains text vs. binary data, whether the text appears to consist of VB source, etc. Check the first couple of bytes and see if they're 0x4d, 0x5a - "MZ", in other words - which would suggest it's a Windows executable.