>
> In the second pass, I display the data back to the user
>
> while (@buffer = <$UserFile>) {print "<P> $buffer";}
>
> and put up a button which will submit a hidden field to indicate the user
> has accepted the data.
>
> print "<FORM METHOD=POST ACTION='myprogram.mpl'>";
> print "<INPUT TYPE=HIDDEN NAME='UserFile' VALUE='$UserFile'>";
You cannot pass a file within a hidden field, actualy here you pass only the
filename not the content of the file. You have to safe the file to a unique
name to the server and pass this name to the next request, but keep in mind
that anybody can play around with this name and sends back a different one.
You should make sure that, you don't create a security whole in this way. On
the third request you can use this filename and open the file localy.
> Why didn't I have to open the file to read the data?
>
Embperl (actualy CGI.pm in this case) has already opend the file for you
Gerald
-------------------------------------------------------------
Gerald Richter ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting
Post: Tulpenstrasse 5 D-55276 Dienheim b. Mainz
E-Mail: [EMAIL PROTECTED] Voice: +49 6133 925131
WWW: http://www.ecos.de Fax: +49 6133 925152
-------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
