I agree with both of you on the security question.
My script is meant for inhouse use. I'm trying to make a task easyer when today. Uploading would make it even more difficult when today (using MS Word and it's mail merger function).
We have a system that is able to make *.csv files with the customer information. Unfortunatly I'm not allowed even reading access to the database :-(. In my web based system, based on php and mysql, I have stored all standard letters which I hoped to "merge" the customer information with the script above.
If you guy's are right, this would not work?!? (Other suggestions then upload the file??)
However, why does this work on Apache on Win2000?!?
Kj.