Also,
Make sure to check the size of the file that is just posted and where it
is posted to (ie dont let them post to /etc/passwd) This is a good
denial of service hack that most people forget.
Kevin
Paul Fitzgerald wrote:
>
> Hi Daniel
> After specifying the enctype to be multipart/form data any check box data etc that
> you POST needs to be explicitly retrieved inside a conditional loop or switch where
> the input type is multipart/form data. Inside this conditional block you then need
> to do your request.getParameter() for each type of multipart/form-data parameter
> type . Here are the types of data that you will be uploading: TEXT | PASSWORD |
> CHECKBOX |RADIO | SUBMIT | RESET | IMAGE | HIDDEN | FILE )See RFC 1867 . So you
> will explicitly need to do a request for each type. Here is an article that you may
> be interested in http://www.servletcentral.com/1999-01/parser.dchtml . And RFC 1867
> below. If you would like an example and a further description I will mail you code
> with an explination tomorrow.
>
> http://www.servletcentral.com/1999-01/parser/rfc1867.txt
>
> Paul Fitzgerald
> Telecommunications Researcher
> Broadcom Eireann Research
> Kestrel House
> Clanwilliam Court
> Dublin 2
> Ireland
>
> Daniel Kreutzer wrote:
>
> > I have the following problem when uploading files with <input type=file...>:
> > To ensure that the upload works properly, I have to include the
> > enctype="multipart/form-data" entry in the form tag. But if I do this,
> > the request object contains no data.
> >
> > Any ideas ?!?!
> >
> > Thanks
> >
> > Daniel
> >
> > ===========================================================================
> > To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
> > FAQs on JSP can be found at:
> > http://java.sun.com/products/jsp/faq.html
> > http://www.esperanto.org.nz/jsp/jspfaq.html
>
> ===========================================================================
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
> FAQs on JSP can be found at:
> http://java.sun.com/products/jsp/faq.html
> http://www.esperanto.org.nz/jsp/jspfaq.html
--
Kevin A Burton
Software Engineer
http://relativity.yi.org
Mobile: 408-910-6145
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
FAQs on JSP can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
