Skip to content

File Type Restrictions & Custom File Types

Learn how to configure which file types are allowed in your store and how to add custom file type restrictions for security and organization.

Alva Digital Downloads supports a comprehensive list of file types by default. See the complete list in Uploading Digital Files.


Certain file types can pose security risks:

High-Risk File Types:

  • .exe, .bat, .cmd - Executable files
  • .scr, .com - Screensavers and command files
  • .vbs, .js - Script files
  • .msi, .app - Installer packages

Why restrict:

  • Prevent malware distribution
  • Protect your customers
  • Comply with platform policies
  • Reduce liability
  • Control product catalog: Only sell specific types
  • Storage optimization: Prevent large unnecessary files
  • Brand consistency: Stick to your niche
  • Support simplicity: Easier to support specific formats

  1. Go to Settings in the Alva app
  2. Scroll to File Type Restrictions section
  3. View list of allowed extensions

By default, all supported file types are allowed. The list includes:

  • Documents: PDF, DOCX, TXT, etc.
  • Images: JPG, PNG, SVG, etc.
  • Videos: MP4, MOV, AVI, etc.
  • Audio: MP3, WAV, FLAC, etc.
  • Archives: ZIP, RAR, 7Z, etc.
  • And more…

To prevent certain file types from being uploaded:

  1. Navigate to SettingsFile Type Restrictions
  2. Find the Allowed File Types list
  3. Click Manage Restrictions
  1. Uncheck file types you want to block
    • Example: Uncheck .exe, .bat, .cmd
  2. Click Save

Result: Users can no longer upload unchecked file types.

To only allow certain file types (stricter control):

  1. Go to SettingsFile Type Restrictions
  2. Select Custom Allow List mode
  3. Enter only the extensions you want to allow
    • Example: pdf, docx, jpg, png, zip
  4. Click Save

Result: Only specified file types can be uploaded.


  • Upload Blocked: Restricted file types cannot be uploaded
  • Existing Files: Already uploaded files are not affected
  • Error Message: Users see clear error when attempting upload

The app checks file extensions (e.g., .pdf, .jpg) to determine file type. It does NOT deeply inspect file contents.

Important: Users could potentially rename files to bypass restrictions. This is a basic security measure, not foolproof.


Goal: Only sell PDF eBooks

Configuration:

Allowed types: pdf, epub

Result: Customers can only upload PDF and EPUB files.


Goal: Sell only graphic files

Configuration:

Allowed types: jpg, jpeg, png, svg, ai, psd, eps, pdf

Result: Only image and design file formats accepted.


Goal: Music and audio files only

Configuration:

Allowed types: mp3, wav, flac, aac, ogg, m4a

Result: Only audio formats allowed.


Goal: Block all executable and script files

Configuration:

Blocked types: exe, bat, cmd, scr, com, vbs, js, msi, app, sh, py, php

Result: No executable or potentially dangerous file types.


You can also set different size limits for different file types:

File TypeMax Size
Documents (PDF, DOCX)100 MB
Images (JPG, PNG)50 MB
Videos (MP4, MOV)2 GB
Audio (MP3, WAV)200 MB
  1. Go to SettingsAdvanced File Settings
  2. Enable Type-Specific Size Limits
  3. Set limits for each category
  4. Save

Note: This feature may not be available in all plans. Check your plan features.


If you need to upload a file type not currently supported:

  1. Check if truly needed: Can you convert to supported format?
  2. Contact support: Request via chat or email
  3. Provide details:
    • File extension (e.g., .xyz)
    • MIME type
    • Use case explanation
    • Sample file for testing
  1. Security review
  2. Technical feasibility check
  3. MIME type configuration
  4. Testing
  5. Deployment (usually within 1-2 weeks)

Cause: File extension is restricted

Solution:

  • Upload an allowed file type, OR
  • Ask admin to enable this file type in settings

Cause: File has no extension (e.g., “document” instead of “document.pdf”)

Solution:

  • Rename file to include correct extension
  • Example: documentdocument.pdf

Cause: File extension doesn’t match actual file content

Solution:

  • Ensure file is not corrupted
  • Re-export file from original software
  • Verify file extension is correct

  1. Always block executables

    • Block: .exe, .bat, .cmd, .scr, .msi
    • Unless you specifically sell software
  2. Be cautious with scripts

    • Block: .vbs, .js, .sh, .py, .php
    • Unless selling code/development resources
  3. Review periodically

    • Check allowed list quarterly
    • Remove any types no longer needed
  4. Educate users

    • Document allowed file types
    • Provide clear error messages
    • Offer alternatives
  1. Match your niche

    • Audio store? Only allow audio formats
    • Template store? PDF, DOCX, XLSX, etc.
  2. Keep it simple

    • Don’t allow too many types if you don’t need them
    • Easier to support fewer formats
  3. Consider customer needs

    • Allow formats your customers expect
    • Don’t restrict formats unnecessarily
  4. Plan for future

    • Allow room for expansion
    • Don’t over-restrict early on

Extensions: pdf, doc, docx, txt, rtf, odt
Use case: eBooks, guides, manuals, templates
Extensions: jpg, jpeg, png, gif, svg, webp, tiff, ai, psd
Use case: Graphics, photos, design files
Extensions: mp4, mov, avi, mkv, webm, flv, m4v
Use case: Courses, tutorials, stock footage
Extensions: mp3, wav, flac, aac, ogg, m4a
Use case: Music, audiobooks, sound effects
Extensions: zip, rar, 7z, tar, gz
Use case: Bundles, collections, software
Extensions: html, css, js, json, xml, py, php
Use case: Themes, plugins, snippets

  1. Configure restrictions
  2. Test upload with:
    • ✅ Allowed file type → should succeed
    • ❌ Blocked file type → should fail with error
  3. Verify error messages are clear
  4. Check existing files still accessible
  1. Notify team of new restrictions
  2. Update documentation
  3. Monitor upload errors
  4. Adjust if needed

Some plans include logging of blocked uploads:

  1. Go to SettingsSecurity Logs
  2. Filter by “File Type Restriction”
  3. View:
    • File name attempted
    • File type attempted
    • User who tried
    • Timestamp

Use cases:

  • Identify if legitimate users are confused
  • Detect malicious upload attempts
  • Adjust restrictions based on real usage

Q: Can customers see which file types are allowed?

Section titled “Q: Can customers see which file types are allowed?”

A: Not automatically. Consider adding allowed types to:

  • Product descriptions
  • Upload instructions
  • FAQ page

Q: What happens to existing files if I block their type?

Section titled “Q: What happens to existing files if I block their type?”

A: Existing files are NOT affected. Restrictions only apply to new uploads.

A: Generally not recommended for security reasons. If you must sell software:

  • Use ZIP archives containing .exe
  • Include security warnings
  • Consider using external download links

A: Select “Allow All Supported Types” in settings. But consider security implications.

Q: Do file type restrictions affect pack creation?

Section titled “Q: Do file type restrictions affect pack creation?”

A: No. Packs can include any already-uploaded files, regardless of current restrictions.