using 1.3.9h; worked as adveritised. I added the customer's file name back into the download name; although customer may use a crazy name, its a name he knows and will be easier to communicate with him what file he actually sent.

Also, on the case on file type (to download), i removed the die and replaced with application/force-download. This will let me at least download his file of any type. Also, avoids having to synchronized the list of allowed upload files with the list of allowed downloads.

And Delete would be great; how many donuts will it take :) ?