First form: validation, PHP conversion and file privacy

[Mortom]

Hi all,
I am new to Form Tools (v2.2.6) and I am setting up a form to include in a Wordpress page. Some questions have come up, and I would like to ask if you could give me a hand on this:
1- I can't get rsv.js validation to work. My form tag looks like this:

Code:

<form action="http://[mywebsite].pt/ftools/process.php" enctype="multipart/form-data" method="post"  onsubmit="return rsv.validate(this, rules)">

And the header includes:

Code:

<script type="text/javascript" src="http://www.[mywebsite].pt/ftools/global/scripts/rsv.js"></script>
<script type="text/javascript">
var rules = [];
rules.push("required,nome,Por favor preencha o campo Nome.");
rsv.errorFieldClass = null;
rsv.displayType = "alert-all";
rsv.customErrorHandler = null;
</script>

I have checked the rsv.js location and the file is in fact there. "nome" is a field name in the form, as in

Code:

<td width="200px"><label>Nome</label></td>
<td><input maxlength="150" name="nome" size="30" type="text" /></td>

Javascript is enabled in the browser. Might I be missing something else?

2- I have understood that a php form and server-side validation are more powerful, since I am particularly concerned with spam submissions that override any JS validation. How easy would it be to convert an HTML form to PHP and include it in a Wordpress page? Can you link me to a tutorial on that?

3- I have found that uploaded files become public, which is something I would like to avoid. Is it possible to restrict access to them (e.g. only with FTP login or ftools login)?

Thanks in advance,
Mortom