Ouch! Don't do that. If you manage to get it to work, you will be keeping the uploaded file in memory between requests. If the second request never comes, it will stay in memory until the session times out, normally after 20 minutes. The application would be totally open for a DoS attack. You just have to upload a lot of files, and it will use up all the memory of the server. Why don't you save the file when you recieve it? --- b { font-weight: normal; }