Great points, and I figured as much would be needed to 'rule in' acceptable items
do you think that the browser mime type would be sufficient to 'rule out' items as a preliminary check?
Not really. You're pretty likely to get a bogus type (like application/octet-stream) on uploads. You're likely to miss valid files this way.
Richard Rebel also brings up some very good points in his reply.
-- Dan Wilga [EMAIL PROTECTED] Web Administrator http://www.mtholyoke.edu Mount Holyoke College Tel: 413-538-3027 South Hadley, MA 01075 "Who left the cake out in the rain?"