Remote users with file upload privileges can upload file types with any extension, this by appending an allowed extension into the middle of the filename, for example if the extension 'gif' is allowed the following file can be uploaded: example.gif.php.