I just read the Microsoft Security alert: <BR>http://www.microsoft.com/technet/security/bulletin/MS00-093.asp <BR><BR>where you can use JavaScript to fill in a file name on a form name & upload (using ASP). Does anyone have a sample of how 2 do this? I know, you&#039re going to flame me for exploiting users but it&#039s at the request of my employer, who wants to use it for good purposes. Ex: an upgrade of a propietary (sp?) system has been released & we could upload an .ini file with the version number to make sure users have upgraded. <BR>Please, I understand the security risks. If you&#039d rather not respond publicly, email me: generaltso@brew-master.com