no problem
depending ... on how important security is ...
you could just upload the files to a directory with a random magic number that you give the user so they can access their file. You can store this name in the database if you want with a reference to the user id ...
Its not secure but guessing the filename could be close to impossible ... you could of course monitor network traffic to see what files are being accessed but that'd be complicated and require a lot more access / knowledge
the method of storing them with a magic number filename or similar would mean you won't have to pass the file through a php script or similar which on a busy site would mean a lot less overhead. |