Yes, I do see the security issues. We have tens of thousands of xml files to process, however, and I was hoping to use a better method than running a local script on these files, or forcing people to upload each one by one. I suppose I can archive the files into one file and upload this, then unarchive it and process them. Thanks for the help :)