Thanks for the feedback Eliot. Why couldn't the files be uploaded to a location that is outside the web root directory and called via script?

Say the directory structure is:

/www/htdocs
/www/cgi-bin

Where htdocs is the location of the server's web directory. Why couldn't another folder be utilized outside of the web directory:

/www/htdocs
/www/cgi-bin
/www/uploads

And then use that directory to store the resume documents causing access to be available only via the scripts?

Thanks!

Karen