in reply to RE: RE: RE: RE: Re: File Upload Security Question
in thread File Upload Security Question

> I'm not sure what you mean by issuing the correct > Content-Type. Are you meaning that I need to do that > if I serve it from the database? By saving the file > directly to a Web-accessible directory, I thought the > server would handle that when the users clicked on > a link to the file.
No... if you let the webserver handle the file, you should have no problems so long as your mime types are configured properly. I meant if you put the files in a non-web-accessible directory and handled pushing out the files yourself.