"Why isn't .xls a valid uploadable file extension?"
Any chance of this happening?
I'm not sure if a "harmful macro" could "screw up Excel settings" but who knows, malicious excel users can be creative.
Note: It's nice to be able to attach files to posts. I wonder if it's feasable to implement an automatic "Virus Scan" to attached files? So far I've been lucky by not downloading some files because other users caught keyloggers/viruses first.