For the administration site of my client&#039;s website, i&#039;m allowing the admin person to upload images of products he&#039;s selling via the web. <BR>I&#039;m using the FileSystemObject&#039;s CreateTextFile method to create the file, and it works without a problem. The only hitch is this - the image directory must have write permission by IUSR_machine. Isn&#039;t this a security problem, i mean can&#039;t anyone then upload an ASP file to that directory and cause chaos?<BR><BR>Any help would REALLY be appreciated