Re: <INPUT TYPE=FILE VALUE="">

From: Date: Mon, 27 Nov 2000 12:23:13 +0000
Subject: Re: <INPUT TYPE=FILE VALUE="">
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-27348@lists.php.net to get a copy of this message
Hi! This isn't possible due to a security (and privacy) risk. Imagine that a you fill in the form and put in /etc/shadow or something, the user takes no care, posts the form and you can start your shadow hack.. (hope none is browsing with uid 0 :) ) That netscape fills out *.html into the file-filter is bothering for the user when you give him for example an "image-upload-dialogue", butI i think we've to live with that problem... regards Folke -- Folke Ashberg Stage Internet Services GmbH Technical Development folke@fanstage.de folke@fanstage.de | Tel: +49 89 454591-77 | Fax: +49 89 454591-71 Kreillerstr. 21 | 81673 Munich | Germany | www.fanstage.de On Mon, 27 Nov 2000 php3@developersdesk.com wrote: > > I've got file uploads working. > > RFC1867 seems to imply that I can suggest a file name to be uploaded, by > naming it in the VALUE="" parameter of the INPUT tag. > > I've tried both VALUE="NEW.dmp" and VALUE="*.dmp" with no luck. My > browser is defaulting to a directory that contains the proper files, but I > don't get anything filled in, either in the file name text box, or in the > popup when I hit Browse. > > > Has anyone made this work? > > > Thanks in advance... > > > > Rick Widmer > Internet Marketing Specialists > http://www.developersdesk.com > >

« previous php.general (#27348) next »