I'm happy the upload works for you Alex. > do I have to take care about directory traversals and other security > risks? What's the easiest way to do this?
As I understand it the store() renaming of the file is what takes care of the dir traversal protection. I'm not a web2py dev so don't quote me on that. Perhaps you lot can confirm? David