89
The latest version seems to have its admin menu cross-wired. I can't see the list of downloads unless I pick "broken downloads"... ?
Also, the case-mangling problem persists. If I upload "LittlePal.mmm" it doesn't work, but if I rename it to "littlepal.mmm" no problem.
And I had a thought of how you might implement some "real" security. How about when a file is received, you generate a random string of some considerable length (30 chars or so), and rename the file to that. Put the original filename in a database table with the random string. Now it's impossible for people to guess what file to download directly from the upload directory.
When someone downloads a file, the script would have to send the right content-type and content-disposition headers, and then pipe the randomly named file down to the client.
What do you think?
