Implement a secure file upload

Prompt that secures a file upload with checked file types, limits, own file names and controlled access. Paste it into an AI tool of your choice, which then secures uploads.

Topic: Apps & prototypes
Type: Prompt
Level: Intermediate
Time: about 10 min

Results depend on the tool, the model and what you enter.

Result preview

Example: written by our editors, not real AI output.

Allowed: JPG, PNG, PDF; content checked by file signature, the extension alone does not count Limits: 10 MB per file, 5 files per report, 20 uploads per hour and account Name: random ID, original name only for display Storage: private object storage without a public address Delivery: only via short-lived links after a permission check, as a download Photos: strip location data; delete 90 days after the report is closed Tests: PDF with script, renamed executable, 50 MB file, link to another user's report Assumption: the storage provider's virus scan is available

Fill in

What you type stays in this browser window. We store and send nothing.

UploadWhat is uploaded?

StorageWhere do the files end up?

StackWhat do you work with?

Your prompt

Plan a secure file upload for the following feature.
What is uploaded: [Upload]
Where the files end up: [Storage]
Stack: [Stack]
Approach: 1. Define which file types are allowed and check the real content instead of only the file extension or declared type. 2. Set limits for size, number and frequency per person. 3. Assign your own random file names and store uploads outside the executable web directory. 4. Decide who may see which file, and serve files only with matching permissions and safe response headers. 5. Describe where a malware scan or stripping metadata makes sense. 6. List tests for malicious files, oversized files and access by other users.
Output: rules as a list, then the flow from upload to delivery, then the test cases. Mark assumptions about libraries or services as assumptions.

Take particular care to never accept file names, types or paths unchecked and control every access individually.

Before you answer, check: Are all instructions met? If key information is missing or a placeholder in square brackets is still in the text, ask instead of guessing. Mark assumptions as assumptions.

Plan a secure file upload for the following feature.
What is uploaded: [Upload]
Where the files end up: [Storage]
Stack: [Stack]
Approach: 1. Define which file types are allowed and check the real content instead of only the file extension or declared type. 2. Set limits for size, number and frequency per person. 3. Assign your own random file names and store uploads outside the executable web directory. 4. Decide who may see which file, and serve files only with matching permissions and safe response headers. 5. Describe where a malware scan or stripping metadata makes sense. 6. List tests for malicious files, oversized files and access by other users.
Output: rules as a list, then the flow from upload to delivery, then the test cases. Mark assumptions about libraries or services as assumptions.

Take particular care to never accept file names, types or paths unchecked and control every access individually.

Before you answer, check: Are all instructions met? If key information is missing or a placeholder in square brackets is still in the text, ask instead of guessing. Mark assumptions as assumptions.

This is an instruction for an AI, not the result itself.

Where this prompt works

These AI tools are a good fit for this prompt:

How to use it

Fill in the fields or tap a suggestion. Leave out names, addresses and other personal data.
Copy the finished prompt into an AI tool of your choice.
Before the feature goes live, try the finished rules with a renamed file, a very large file and a link to another user's file.

Why does this work?

Most upload problems arise because the file name, type or path is accepted unchecked. Checking content, assigning names yourself and controlling access per file closes the most common gaps.

Tips

Applications, invoices and photos often contain personal data, so also decide how long files are kept and when they are deleted.

You may use our prompts freely, including at work. Please do not republish them as your own collection. We give no warranty for AI results; check them yourself. Terms of use

Implement a secure file upload

Result preview

Fill in

Your prompt

Where this prompt works

How to use it

Why does this work?

Tips

Also a good fit

Choose pagination for an API list New

Write an API reference people can use right away New

Plan a throttled data backfill New