Rick Faircloth wrote:
However, if I want to take responsibility to designate an entire folder
of files for upload, I should be able to do that, too. Not just one file
at a time, but choose the folder and all its contents.
With the extensions of RFC 2388 the HTTP protocol is perfectly capable
: Thursday, August 28, 2008 9:54 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
there are also commercial java applets out there that allow a user to
select multiple files at once (though not just pointing to the folder
containing the files - actually selecting the files inside
Because that isn't what HTTP was ever designed to do. They made a whole
protocol just to handle this: FTP.
I think this kind of argument is completely obsolete now.
Both HTTP and FTP were designed to allow exchanges between computers
made by computer scientists.
Now, at least for HTTP, their
If they're still clicking and selecting then it isn't more risk per
se, but
creates issues in usability for the user. If they're not careful they could
theoretically upload their entire My Documents folder without realizing it
when they intended to send one file.
Right, but the browser could
I'll bet if I asked all of my
clients to zip up a folder of folders, only 10% would know
how to do it without in-depth instruction.
Then you have a problem.
All depends on the kind of application you have and the kind of clients
who are using it.
Because browsers weren't designed to allow you to do that.
Again, this is not a reason they could not be upgraded to do it.
Browsers were not designed to support tables and CSS either, now they do.
~|
Adobe® ColdFusion® 8
Right, but the browser could calculate the total length ...
Could, yes, but I don't expect to see an upload a folder feature added
to HTTP or the browsers as a standard any time soon.
After all, one could also delete all his files in his system, this is
nor a reason to force him to delete
[mailto:[EMAIL PROTECTED]
Sent: Friday, August 29, 2008 1:29 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
Because browsers weren't designed to allow you to do that.
Again, this is not a reason they could not be upgraded to do it.
Browsers were not designed to support tables
And before someone gets pedantic on me, I mean it is always going to be
impossible in its current form, which is allowing arbitrary server-supplied
JavaScript to modify the field value. Someone may well come up with some
kind of authentication or authorization system where one can set different
No one is saying it can't be changed or added. The point is that it is not
possible now, which was the root question being asked in this thread.
Talking about what might be added in the future seems relatively pointless
as far as giving an answer to the posed question. In fact, we're already far
Is there some way to pre-fill a filefield value?
I'm trying this:
cfloop from=1 to=#filenamelist.recordcount# index=i
cfoutput#i#/cfoutputbr
cfoutputfilenameList.recordcount =
#filenameList.recordcount#/cfoutputbr
input name=cfoutput#i#/cfoutput type=file
automatically submit forms
with JavaScript anyway...
~Brad
- Original Message -
From: Rick Faircloth [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Thursday, August 28, 2008 12:28 PM
Subject: Pre-filling FileField Values
Is there some way to pre-fill a filefield value
Is there some way to pre-fill a filefield value?
Forget it.
Imagine it was possible, then a page could get directly some very
sensitive files
like your system files, or address book...
~|
Adobe® ColdFusion® 8 software 8 is the
and all they would need
to do was submit the form.
Not even, this could be done in an onload event ;-)
~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to
date
Get the Free Trial
I see your point.
How do the multiple file uploaders in javascript or flash
get around this problem?
-Original Message-
From: Brad Wood [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 1:46 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
No. It's a security
I would be interested in your use case for this. As everyone has already
pointed out this is a huge security risk but even from a user standpoint it
doesn't make sense to me why you would want to do this?
Thank You
Dan Vega
[EMAIL PROTECTED]
http://www.danvega.org
On Thu, Aug 28, 2008 at 1:46
Sigh... security...wouldn't need so much of it if we could
all be trusted. Can't we just all be nice? :o)
-Original Message-
From: Claude Schneegans [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 1:45 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
/entry/file-upload-with-coldfusion-flash-forms
~Brad
- Original Message -
From: Rick Faircloth [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Thursday, August 28, 2008 12:52 PM
Subject: RE: Pre-filling FileField Values
I see your point.
How do the multiple file uploaders
Rick Faircloth wrote:
I see your point.
How do the multiple file uploaders in javascript or flash
get around this problem?
I've never seen javascript that could do this, once a bug in I.E. that
allowed to was closed.
I did once read about an ActiveX that purported to allow this when used
Can't we just all be nice? :o)
No. See the recent string of SQL Injection attacks for details.
:)
~Brad
~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to
date
Get the Free Trial
Dan Vega wrote:
I would be interested in your use case for this. As everyone has already
pointed out this is a huge security risk but even from a user standpoint it
doesn't make sense to me why you would want to do this?
I've run into this request when working with corporate web
applications.
can't CF have one
that doesn't pose a security risk, if the javascript solutions don't?
Rick
-Original Message-
From: Dan Vega [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 2:01 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
I would be interested in your use
: Thursday, August 28, 2008 2:06 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
Rick Faircloth wrote:
I see your point.
How do the multiple file uploaders in javascript or flash
get around this problem?
I've never seen javascript that could do this, once a bug in I.E. that
allowed
Rick Faircloth wrote:
(If I understand it all with only a cursory review.)
Just reading your posted description, this is a way to just create
multiple file upload controls. JavaScript can easily do this, I am
unclear on what the benefit of making them all separate forms in iframes
is, but
I thought perhaps there was a way to auto-fill with a
cfdirectory-generated list and corresponding fields for
each file that would be pre-filled, then all the user would
First, CFDIRECTORY only has access to the files and directories on the
server, not the client, so you wouldn't be able to
I wrote a multi uploader in flex / cf. If you need the source I could
probably help you out.
http://cfmu.riaforge.org
Thank You
Dan Vega
[EMAIL PROTECTED]
http://www.danvega.org
On Thu, Aug 28, 2008 at 3:03 PM, Ian Skinner [EMAIL PROTECTED] wrote:
Rick Faircloth wrote:
(If I understand it
.
Perhaps I'll email him about it.
-Original Message-
From: Ian Skinner [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 3:04 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
Rick Faircloth wrote:
(If I understand it all with only a cursory review.)
Just reading
filefields,
but they still have to be Browsed one-at-a-time for the files.
-Original Message-
From: Dan Vega [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 3:16 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
I wrote a multi uploader in flex / cf. If you need
Well the way I read it, but I have not looked at the site. Is that this
tool creates multiple file controls, then a user has to populate them
with files, then the button submits them all.
But I got to admit all that iframe and separate form stuff is an awful
lot of work to do this rather
There are javascript solutions for this, so why can't CF have one
that doesn't pose a security risk, if the javascript solutions don't?
Rick
It should be pointed out that CF is not involved in this limitation at all. If
you want to make a case for change it would need to be made with the
Ian Skinner wrote:
But I got to admit all that iframe and separate form stuff is an awful
lot of work to do this rather simple functionality.
I just read through the post for that multiple file loader JavaScript.
The problem he is trying to get around using multiple forms is size
limits and
I believe the Zip functionality that was suggested to the CFnewbie poster would
be an ideal solution for your 20 photos.
You can instruct the client to zip all of the photos into a zip file and then
upload using the form.
You can check to see if it is a .zip file, if it is, you can unzip it to
with a working example.
I'll let everyone know.
-Original Message-
From: Ian Skinner [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 3:48 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
Well the way I read it, but I have not looked at the site. Is that this
tool
Subject: Re: Pre-filling FileField Values
There are javascript solutions for this, so why can't CF have one
that doesn't pose a security risk, if the javascript solutions don't?
Rick
It should be pointed out that CF is not involved in this limitation at all.
If you want to make
Thanks for the suggestion, William. I'll keep that in my
notes as a solution next time I'm confronted with that issue.
Rick
-Original Message-
From: William Seiter [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 3:57 PM
To: CF-Talk
Subject: Re: Pre-filling FileField
: Thursday, August 28, 2008 3:57 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
I believe the Zip functionality that was suggested to the CFnewbie poster
would be an ideal
solution for
your 20 photos.
You can instruct the client to zip all of the photos into a zip file and then
upload
Sometimes clients want to load 20 photos or more of a property
and they complain about having to select each photo individually.
Exact, one should be able to upload every thing like *.jpg in a
directory, or select several files in it.
I've implemented another solution were clients can send all
Rick Faircloth wrote:
This issues just sounds like it could be addressed
by placing limitations on what type of files are acceptable
in the upload. Such as with cffile... I don't really know.
But the point is that cffile... would happily accept anything right
now. ColdFusion does not care
The bottom line is that you cannot use JavaScript to set the value of a file
field. You just can't do it. The browser makers went out of their way to
make sure that this is impossible due to the devastating security issues
that would result if it were allowed.
There is absolutely no way to insert
Yes, getting the basic standards which restrict functionality
would be another whole game...
-Original Message-
From: Ian Skinner [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 6:05 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
Rick Faircloth wrote
. Not just one file
at a time, but choose the folder and all its contents.
Why not?
-Original Message-
From: Brian Kotek [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 6:35 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
The bottom line is that you cannot use
However, if I want to take responsibility to designate an
entire folder of files for upload, I should be able to do
that, too. Not just one file at a time, but choose the
folder and all its contents.
Because browsers weren't designed to allow you to do that. If you want to
escape the
However, if I want to take responsibility to designate an entire folder
of files for upload, I should be able to do that, too. Not just one file
at a time, but choose the folder and all its contents.
Why not?
I think you're completely missing the whole security issue that would be
created
Schneegans [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 5:30 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
Sometimes clients want to load 20 photos or more of a property
and they complain about having to select each photo individually.
Exact, one should be able
Ha! Claude! Are you kidding! I'll bet if I asked all of my
clients to zip up a folder of folders, only 10% would know
how to do it without in-depth instruction...
For those types I generally just deploy an FTP account and craft a URL
that they can click on such as:
ftp://user:[EMAIL
On Thu, Aug 28, 2008 at 7:03 PM, Rick Faircloth [EMAIL PROTECTED]wrote:
the user still has to explicitly choose a file value to put into it
And that's good...the user should know exactly what they're uploading
and be able to control that.
However, if I want to take responsibility to
Sounds like a good idea!
-Original Message-
From: Justin Scott [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 7:07 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
Ha! Claude! Are you kidding! I'll bet if I asked all of my
clients to zip up a folder
to understand, not because I think I know
what's better...
-Original Message-
From: Justin Scott [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 7:11 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
However, if I want to take responsibility to designate an entire folder
to push
way more than 20 Browse buttons looking for files.
-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 7:14 PM
To: CF-Talk
Subject: RE: Pre-filling FileField Values
However, if I want to take responsibility to designate
:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 7:48 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
On Thu, Aug 28, 2008 at 7:03 PM, Rick Faircloth [EMAIL PROTECTED]wrote:
the user still has to explicitly choose a file value to put into it
And that's good...the user should
How would the one folder method be more risky than the one
file method?
If they're still clicking and selecting then it isn't more risk per se, but
creates issues in usability for the user. If they're not careful they could
theoretically upload their entire My Documents folder without
there are also commercial java applets out there that allow a user to
select multiple files at once (though not just pointing to the folder
containing the files - actually selecting the files inside the folder,
but they can click on and select multiple files in one 'select files'
window, or in
Message-
From: Justin D. Scott [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 9:56 PM
To: CF-Talk
Subject: RE: Pre-filling FileField Values
How would the one folder method be more risky than the one
file method?
If they're still clicking and selecting then it isn't more
Ah-ha! I knew it!
-Original Message-
From: Azadi Saryev [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 28, 2008 9:54 PM
To: CF-Talk
Subject: Re: Pre-filling FileField Values
there are also commercial java applets out there that allow a user to
select multiple files at once
54 matches
Mail list logo
