use URLEncode() to encode the URL into something a browser can understand.
ok, I'll check in the manual, thanks :o)
BTW, this is just about the worst thing you can do for security. It will be a matter of days before someone tries to call this url with your password file in the "file" field.
that's ok, this is for an intranet, it's not a secret file or anything, the links are there just to make the files easier to find...
cheers - dunstan