Brando, for your upload script thing, it appears as though you aren't running a database server on your compy, is this right? :x

Thus, I am guessing that you most likely have the username and password information in a text file. Even if it is encrypted, this is still somewhat of a security issue. You have disabled virtual directory listings though, which provides somewhat more protection. install mySQL imho. ^^