idonen - 2:37 pm on Nov 18, 2005 (gmt 0)

I thought the file had to be in the root directory of the site.

Any site that allows visitors to create files in the root directory is a site asking for security trouble with a capital T.