Karen

> I am building a sample application that would normally run over an intranet
> in an internet environment, so the normal file system commands I would use
> are not available.
> 
> I need to be able to ftp a file to a server which is an sql server rather
> than the web server that is hosting the page. I have FTP access to the SQL
> server.

Why are you sending a file to your SQL Server via FTP? In terms of security I would have all non-essential services disabled on a SQL box, and I would attempt to ensure that FTP was a non-essential service on such a box. What is the file being used for? Could you upload it to the Web Server via HTTP instead? If not, could you upload it to the Web Server in binary format and save it to the database as such? I understand that it being an intranet one may suppose the security risks to be lower, but my experience has taught me otherwise for a variety of reasons.

> I want the user to be able to use a form to browse to a file (that bit I can
> do!) and then on submit the file should be FTP'd to the sql server. I have:
> the server IP, the directory structure I want to FTP to, the user name and
> the password.
> 
> Is there a simple script (I'm not a techie) that I can use to do the FTP?

Either of the two scenarios above are relatively easy to script - feel free to respond if you require further discussion along these lines.

> The application is SQL/ASP based.

Regards

Chris Marsh



"Cthulhu for President. Why vote for a lesser evil?" --Cthulhu.org