hi all.<BR>my users will have the option to upload excel files (xls) to the server, after that the file will be processed by my asp page.<BR>the asp creates an excel object on the server to process the xls file.<BR><BR>my question:<BR>is it enough to check that the file extension is xls?<BR>is there anything more that i should/can check to avoid security holes?<BR><BR>thanks.