Creating A Text File Online

Hi

One of our new suppliers requires that we create a text file for new orders and attach that file to an email that we send to them (I guess that they have an automatic process to handle new orders).

Currently this process creates a new entry in the suppliers database for them to work but this new supplier wants something different.

I can automatically create the required text file and attach it to an email via ASP but to do so I need to open up write permission to the folder.

My question is: Do you think that opening this write facility leave our server open to any kind of attack?

Windows 2003 server (please no time wasting anti - microsoft crap, thanks).

Mick