Re: Upload file name not file

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm not trying to get the path, just the filename and size, I know how to 
get these, but that would include the file using $_Files, but I dont want to 
upload anything just use the filename and size.(without the path) to insert 
into a DB.
"Simon" <turner25@xxxxxxxxx> wrote in message 
news:5f14cf5e0905010629s2253cc3bk2a83dbf8b754c4b9@xxxxxxxxxxxxxxxxx
>> Id like to use the popup file system box(<input name="userfile" 
>> type="file"
>> />) to choose a file name , but I only want to upload the filename , not 
>> the
>> file. Can I do that?
>
> You're not supposed to have any access to the remote visitor's
> computer, and the path to the file being uploaded could contain
> sensitive information (ie. like username of windows user).  There are
> ways to get the information, even to read information on disk without
> the use of a file upload form.  But they are/will be considered like
> security threats and are/will be closed down.
>
> IMO, whatever way you find to get this information is meant 1) not to
> be portable accross different browsers and 2) to stop working
> eventually.  (Of course unless you ask the user to explicitly type the
> path in a text input)
>
> What do you need this for? 



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux