hello!
yes you can use copylevel, the first parameter is the level file name and the second parameter is both the path (from within the 'levels/' folder) and filename:
PHP Code:
//would create a copy of copytest.nw at 'levels/player/level_blackbeltben.nw'
copylevel("copytest.nw", "player/level_" @ temp.pl.communityname @ ".nw");
you can then use deletelevel("level_blackbeltben.nw"); to delete it
you should definitely avoid passing player.account and the level name prefix as a parameter from clientside to serverside, as a hacker could easily modify that to someone elses account, or even change the file name structure to over-write a different level or non level file. it would also be much better to use the players community name where it exists as all new account names follow the 'Graal######' format