[snip] it`s working for that host, but my question is.. if a user can upload his file on the server, despite the fact i unset all the global variables where the files are stored. [/snip] The files are stored in the designated temporary location before and then get deleted once the process is over, which is why you must use move_uploaded_file() http://www.php.net/move_uploaded_file to keep from losing the file. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php