Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

SO I'm building an application for uploading files. We're paying scientists to contribute information on pests, diseases and bugs (for Plants). We need the ability to drag and drop a file to upload it.

The question becomes since the users will be authicentated and setup by us, will it be necessarcy to include a virus scanner to prevent the uploading and insertition of malicious files.

How important is this?

share|improve this question
What kind of files? Pictures? Documents? Presentations? Zip files? Executables? – Greg Hewgill Jun 7 '12 at 21:07
up vote 4 down vote accepted

Yes. Always. Never consider not scanning the files. The scanner may not be perfect, but at least you have something that can be updated when new "bad file" cases are found, rather than nothing at all. The people uploading the files might be, under good intentions and unknowingly, uploading a file that has a virus or malicious code in it. Even if you never handle the file in a way that can harm you, it could harm the computers of the people who retrieve the files. Think of it this way: you're using authentication to help protect access to the files, whereas you would use virus scanner to help protect the safety of the computers that will use or handle the files. They are two different things that need to be taken into consideration.

share|improve this answer
This. Just because you're paranoid doesn't mean they AREN'T still out to get you (or your customers). – Peter K. Jun 7 '12 at 21:19
What solutions exist to do this in a web app? – Snow_Mac Jun 7 '12 at 21:24
I don't know any off-hand. I had to "deal with" one previously, but it was handled by another group of people in the company, and I don't remember what it was called. – Jeremy Heiler Jun 7 '12 at 22:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.