Question about file uploads

[eluser]Rick Jolly[/eluser]
That's worth mentioning. The example was a starting point and we all know to validate any inputs. I didn't include any controller code, but in the controller you'd validate that the file name is actually a file and not a path. Only then you'd append the file name to the path of your choice and call the download function.

Of course, you wouldn't actually be able to pass a "/" in the img tag without it being treated as another parameter.