Do not use heavy-javascripts, which locks browsers
I didnt test it but I think it could be possible to upload with fake extensions. Better to check both image-header and extension. Look at this...
If just quality matters there should not be any difference.
Separate names with a comma.