Re: <INPUT TYPE=FILE VALUE="">
| From: | Folke Ashberg | Date: | Mon, 27 Nov 2000 12:23:13 +0000 |
| Subject: | Re: <INPUT TYPE=FILE VALUE=""> | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-27348@lists.php.net to get a copy of this message | ||
Hi!
This isn't possible due to a security (and privacy) risk.
Imagine that a you fill in the form and put in /etc/shadow or something,
the user takes no care, posts the form and you can start your shadow
hack.. (hope none is browsing with uid 0 :) )
That netscape fills out *.html into the file-filter is bothering for the
user when you give him for example an "image-upload-dialogue", butI i
think we've to live with that problem...
regards
Folke
--
Folke Ashberg
Stage Internet Services GmbH
Technical Development
folke@fanstage.de
folke@fanstage.de | Tel: +49 89 454591-77 | Fax: +49 89 454591-71
Kreillerstr. 21 | 81673 Munich | Germany | www.fanstage.de
On Mon, 27 Nov 2000 php3@developersdesk.com wrote:
>
> I've got file uploads working.
>
> RFC1867 seems to imply that I can suggest a file name to be uploaded, by
> naming it in the VALUE="" parameter of the INPUT tag.
>
> I've tried both VALUE="NEW.dmp" and VALUE="*.dmp" with no luck.
My
> browser is defaulting to a directory that contains the proper files, but I
> don't get anything filled in, either in the file name text box, or in the
> popup when I hit Browse.
>
>
> Has anyone made this work?
>
>
> Thanks in advance...
>
>
>
> Rick Widmer
> Internet Marketing Specialists
> http://www.developersdesk.com
>
>