With the upload directory being WRITE only it is possible that it will appear to the world as an empty dir with only thier upload present. If this is the case, then they cant access any existed files and edit in any way! Also check out for limited WRITE as opposed to FULL for this dir. Even if there turns out to be no way to lock this down it wont affect the download dir, as all items there will be pre-examined :) Logan