Bob Showalter wrote:
> 
> That's not a workaround; you have to do something like that, because
> if the user types a bogus file name in the upload field, you get a
> handle to an empty file. So you either need to check for the content
> type like you're doing or check that the file contents are what you
> expect, depending on the application.
> 
> The handle you get is obviously not a descriptor to the actual client
> file; it's a handle to a temp file created from the HTTP request body.
> If they specify a filename that doesn't exist on their system, the
> browser "uploads" an empty file.

interesting.  thanks for the tip.

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to