Blocked types include: PHP/HTML/JS/PY/RB and other executable formats. True duplicates (same content) are rejected. Filename collisions become name[#].ext.