function file_unsafe_extensions

Return a list of unsafe file extensions that are never allowed.

Return value

string[]:

Related topics

File

core/includes/file.inc, line 2095

API for handling file uploads and server file management.

Code

function file_unsafe_extensions() {
  // cspell:disable
  $unsafe_extensions = array(
    'asp',
    'cgi',
    'ctp',
    'htaccess',
    'hphp',
    'inc',
    'js',
    'module',
    'phar',
    'php',
    'php2',
    'php3',
    'php4',
    'php5',
    'php6',
    'php7',
    'php8',
    'phps',
    'pht',
    'phtml',
    'phtm',
    'pgif',
    'pl',
    'py',
    'shtml',
  );
  // cspell:enable

  // Allow the list to be overridden in settings.php:
  return settings_get('file_unsafe_extensions', $unsafe_extensions);
}