File Uploading

Hi all, I am trying to write a simple app that allows a user to select a file (via the browse button) from which data can be read in and parsed. I have read several examples but none seem to do exactly what I want. I have built a form and so am trying to use forms.FileField(). I can add this fiel

Re: File Uploading

On Thu, Feb 12, 2009 at 8:02 AM, huw_at1 wrote: > > Hi all, > > I am trying to write a simple app that allows a user to select a file > (via the browse button) from which data can be read in and parsed. I > have read several examples but none seem to do exactly what I want. I > have built a form

Re: File Uploading

On Thu, Feb 12, 2009 at 9:38 AM, Karen Tracey wrote: > On Thu, Feb 12, 2009 at 8:02 AM, huw_at1 wrote: > >> >> Hi all, >> >> I am trying to write a simple app that allows a user to select a file >> (via the browse button) from which data can be read in and parsed. I >> have read several examples

Re: File Uploading

Yep I just found the thread about the enctype and indeed it was this and not my comp catching fire!!! Many thanks :) On Feb 12, 2:48 pm, Alex Gaynor wrote: > On Thu, Feb 12, 2009 at 9:38 AM, Karen Tracey wrote: > > On Thu, Feb 12, 2009 at 8:02 AM, huw_at1 wrote: > > >> Hi all, > > >> I am tryi

Re: File Uploading

enctype 2009/2/12 huw_at1 > > Yep I just found the thread about the enctype and indeed it was this > and not my comp catching fire!!! Many thanks :) > > On Feb 12, 2:48 pm, Alex Gaynor wrote: > > On Thu, Feb 12, 2009 at 9:38 AM, Karen Tracey > wrote: > > > On Thu, Feb 12, 2009 at 8:02 AM, huw_

about file uploading

hi folks, I need to develop an application for uploading big files but one requirement is that I must be able to resume a partially uploaded file. How can I achieve this with django, any ideas? -- Lic. José M. Rodriguez Bacallao Centro de Biofisica Medica -

File uploading problems

I tried using the file upload methods like using a filefield in a model, and i got it to work on a test program but i can't sem to get it to work on my real site and I get a few different errors when it comes up. this is my code: class BulkDataRegFile(models.Model): user = models.ForeignK

Extreme file uploading

I'm working on a little app to manage a podcast RSS feed (believe it or not, someboody actually edits it by hand now). So my first thought was to use the FileField for uploading the enclosure. This worked fine except for one issue: The podcast in question is for video, and the files are typically

Re: about file uploading

Here, let me google that for you.. http://www.radinks.com/upload/plus/resume.php http://www.google.co.uk/search?sourceid=chrome&ie=UTF-8&q=http+upload+resume Please make sure you make reasonable attempt to find the answer yourself on Google, ot

Re: about file uploading

yes, I saw that page but this is a complete application, I need someting with source code for mimifiying in django On Mon, Nov 1, 2010 at 1:35 PM, Cal Leeming [Simplicity Media Ltd] wrote: > Here, let me google that for you.. > http://www.radinks.com/upload/plus/resume.php > http://www.google

Re: about file uploading

WebDav will not work for you? -james On Mon, Nov 1, 2010 at 1:37 PM, Lic. José M. Rodriguez Bacallao wrote: > yes, I saw that page but this is a complete application, I need > someting with source code for mimifiying in django > > On Mon, Nov 1, 2010 at 1:35 PM, Cal Leeming [Simplicity Media Ltd]

Re: about file uploading

with webdav can I uploading a file, interrupt it the then resume the upload again starting from an offset of the previously uploading file ? On Mon, Nov 1, 2010 at 1:54 PM, James wrote: > WebDav will not work for you? > -james > > On Mon, Nov 1, 2010 at 1:37 PM, Lic. José M. Rodriguez Bacallao >

Re: about file uploading

You can use webdav to help accomplish that goal. See: http://stackoverflow.com/questions/492307/uploading-big-files-over-http/1499819#1499819 (from the link Cal provided) -james On Mon, Nov 1, 2010 at 2:19 PM, Lic. José M. Rodriguez Bacallao wrote: > with webdav can I uploading a file, interr

Re: about file uploading

thanks, I was reading this url right now!!! On Mon, Nov 1, 2010 at 2:49 PM, James wrote: > You can use webdav to help accomplish that goal. > > See: > http://stackoverflow.com/questions/492307/uploading-big-files-over-http/1499819#1499819 > > (from the link Cal provided) > > -james > > On Mon, N

Re: File uploading problems

On 9/22/07, jacoberg2 <[EMAIL PROTECTED]> wrote: > > I tried using the file upload methods like using a filefield in a > model, and i got it to work on a test program but i can't sem to get > it to work on my real site and I get a few different errors when it > comes up. this is my code: ... > Tem

Re: File uploading problems

Hey thanks for your help, but i may need a little more. I dont really know anything about apache and without a good background everything i look up is just confusing me. i changed the file system permissions to allow "everyone" to write in the bulk file which is where i have the files directed. An

Re: Extreme file uploading

Hi Andy. Regarding memory usage on the server, AFAIK this is something related to cgi.FieldStorage. more about this here: http://groups.google.com/group/django-developers/browse_frm/thread/2c379ec0fa30804a/# It would be great to have a streaming option, but aparentely this is trickier than it se

Re: Extreme file uploading

arthur debert wrote: >Regarding memory usage on the server, AFAIK this is something related >to cgi.FieldStorage. more about this here: >http://groups.google.com/group/django-developers/browse_frm/thread/2c379ec0fa30804a/# > >It would be great to have a streaming option, but aparentely this is >t

Re: Extreme file uploading

Great patch Ivan, This issue is of great importance as it is one of those oversights that separates a "cool toy" from a reliable "work horse". Istvan --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Django users"

Simple file uploading app

I need a simple file uploading app. Every user should be able to upload files to his own area. This is the basic feature. You could think of additional goodies, but the first step is above feature. I tried to find an application which implements this, but failed. I tried this and other

file uploading clean_data code missing

With the following form in my template File: {{ form.code }} and the appended view code, I get the desired form with text box, Browse... and Submit buttons. But when browse for a plain text file and hit Submit, I get the HttpResponseBadRequest response and the print statements flagged with

Re: Simple file uploading app

Hi. I did simple pic uploader while ago. Source code is available at https://github.com/jtiai/picpaster 25.10.2017 5.58 ip. "guettli" kirjoitti: > I need a simple file uploading app. > > Every user should be able to upload files to his own area. > > This is the basic

Re: Simple file uploading app

0.2017 5.58 ip. "guettli" > kirjoitti: > >> I need a simple file uploading app. >> >> Every user should be able to upload files to his own area. >> >> This is the basic feature. You could think of additional goodies, but the >> first step is >&

Re: Simple file uploading app

tober 2017 16:57:31 UTC+2 schrieb guettli: > > I need a simple file uploading app. > > Every user should be able to upload files to his own area. > > This is the basic feature. You could think of additional goodies, but the > first step is > above feature. > > I

Re: Simple file uploading app

m/tokland/youtube-upload It's not generic enough for general use - at least to me - as for the glance I took, it looks for pairs of files for your tbz site / software (I don't know German), and I don't need an uploader, but I will have it in mind :) > Am Mittwoch, 25. Oktober 201

Re: Simple file uploading app

tching solution I wrote a generic http upload tool: https://pypi.python.org/pypi/tbzuploader/ For ftp there are thousands of clients, for automated upload via http I found none. That's why I wrote above tool. Regards,   Thomas Am Mittwoch, 25. Oktober 2017 16:57:31 UTC+2 schrieb guettli:

Re: Simple file uploading app

ote: > > Just for the records: Since I found no matching solution I wrote a generic > http upload tool: https://pypi.python.org/pypi/tbzuploader/ > > For ftp there are thousands of clients, for automated upload via http I > found none. That's why I wrote above tool. > > R

Re: Simple file uploading app

gt;> Just for the records: Since I found no matching solution I wrote a >> generic http upload tool: https://pypi.python.org/pypi/tbzuploader/ >> >> For ftp there are thousands of clients, for automated upload via http I >> found none. That's why I wrote above tool. >&

FILE UPLOADING in Google application engine

I am using gae with django. I have an project named MusicSite with following url mapping- urls.py from django.conf.urls.defaults import * from MusicSite.views import MainHandler from MusicSite.views import UploadHandler from MusicSite.views import ServeHandler urlpatterns = patterns('',(r'^start

Re: file uploading clean_data code missing

On Jan 3, 2008 10:49 AM, Chris Haynes <[EMAIL PROTECTED]> wrote: > > With the following form in my template > > > File: > {{ form.code }} > > > > > and the appended view code, I get the desired form with text box, > Browse... and Submit buttons. But when > browse for a plain text file and hit

Multiple file uploading in django admin

I have *File* model for uploading file. class File(models.Model): files = models.FileField(upload_to='sampleorder/%y/%m/%d', null=True, blank=True) order_detail = models.ForeignKey(OrderDetail, on_delete=models.SET_NULL, null=True) and for multiple file upload i have *form.py* class

Re: Multiple file uploading in django admin

The answer[1] to that stack overflow question looks correct to me. To summarize, the "files" field on your model only stores a single file. Instead of files field, you'll need to create a new model that's foreign keyed back to your File model to store an arbitrary number of multiple files. [1]

Which tool for editable text file uploading ?

Hello, I'm quite new to Django. I'm working with Django 2.2. I would like to let my web app admin users, to be able to: - upload some text files - edit those files through appropriate view. Other requirements: - Factory Boy integration - PostgreSQL support I've seen these Django Packages: djang

potential issue re in memory django file uploading.

Ok so I was looking through the code and I saw this (in django/core/files/uploadhandler.py) : FileUploadHandler ... def new_file(self, field_name, file_name, content_type, content_length, charset=None): """ Signal that a new file has been started. Warning: As with any da

Re: potential issue re in memory django file uploading.

On Aug 28, 7:58 pm, "david b." wrote: > Ok so I was looking through the code and I saw this (in > django/core/files/uploadhandler.py) : > > FileUploadHandler > ... > >    def new_file(self, field_name, file_name, content_type, > content_length, charset=None): >        """ >        Signal that a

Re: potential issue re in memory django file uploading.

On 28 August 2010 22:46, Graham Dumpleton wrote: > > > On Aug 28, 7:58 pm, "david b." wrote: >> Ok so I was looking through the code and I saw this (in >> django/core/files/uploadhandler.py) : >> >> FileUploadHandler >> ... >> >>    def new_file(self, field_name, file_name, content_type, >> conte

Re: potential issue re in memory django file uploading.

On 28 August 2010 23:09, dave b wrote: > On 28 August 2010 22:46, Graham Dumpleton wrote: >> >> >> On Aug 28, 7:58 pm, "david b." wrote: >>> Ok so I was looking through the code and I saw this (in >>> django/core/files/uploadhandler.py) : >>> >>> FileUploadHandler >>> ... >>> >>>    def new_file

Re: potential issue re in memory django file uploading.

On 28 August 2010 23:21, dave b wrote: > On 28 August 2010 23:09, dave b wrote: >> On 28 August 2010 22:46, Graham Dumpleton wrote: >>> >>> >>> On Aug 28, 7:58 pm, "david b." wrote: Ok so I was looking through the code and I saw this (in django/core/files/uploadhandler.py) :

Re: potential issue re in memory django file uploading.

On 8/28/2010 9:50 AM, dave b wrote: > On 28 August 2010 23:21, dave b wrote: >> On 28 August 2010 23:09, dave b wrote: [...] >>> The documentation and code in django suggests that this is not the >>> case. So lets assume we are not using apache but another httpd of some >>> sort - then this prob

Re: potential issue re in memory django file uploading.

On Aug 28, 11:21 pm, dave b wrote: > >>> So obviously my proposed attack is to simply say "content length is > >>> tiny" and "this file is actually HUGE". > >>> I hope I missed something :) I don't really want this to occur ... > > >> A decent web server such as Apache (under mod_wsgi) will stop

Re: potential issue re in memory django file uploading.

On 8/28/2010 6:10 PM, Graham Dumpleton wrote: > On Aug 28, 11:21 pm, dave b wrote: > So obviously my proposed attack is to simply say "content length is > tiny" and "this file is actually HUGE". [...] > All up, I would suggest you are getting worked up over nothing. +1 regards Steve --

Re: potential issue re in memory django file uploading.

On 29 August 2010 08:28, Steve Holden wrote: > On 8/28/2010 6:10 PM, Graham Dumpleton wrote: >> On Aug 28, 11:21 pm, dave b wrote: >> So obviously my proposed attack is to simply say "content length is >> tiny" and "this file is actually HUGE". > [...] >> All up, I would suggest you are g

Re: potential issue re in memory django file uploading.

On 29 August 2010 13:17, dave b wrote: > On 29 August 2010 08:28, Steve Holden wrote: >> On 8/28/2010 6:10 PM, Graham Dumpleton wrote: >>> On Aug 28, 11:21 pm, dave b wrote: >>> So obviously my proposed attack is to simply say "content length is >>> tiny" and "this file is actually HUGE"

Re: potential issue re in memory django file uploading.

On Aug 29, 1:17 pm, dave b wrote: > On 29 August 2010 08:28, Steve Holden wrote: > > > On 8/28/2010 6:10 PM, Graham Dumpleton wrote: > >> On Aug 28, 11:21 pm, dave b wrote: > >> So obviously my proposed attack is to simply say "content length is > >> tiny" and "this file is actually HU

Re: potential issue re in memory django file uploading.

On 29 August 2010 13:33, Graham Dumpleton wrote: > > > On Aug 29, 1:17 pm, dave b wrote: >> On 29 August 2010 08:28, Steve Holden wrote: >> >> > On 8/28/2010 6:10 PM, Graham Dumpleton wrote: >> >> On Aug 28, 11:21 pm, dave b wrote: >> >> So obviously my proposed attack is to simply say "con

Re: potential issue re in memory django file uploading.

On 8/29/2010 12:05 AM, dave b wrote: > On 29 August 2010 13:33, Graham Dumpleton wrote: >> >> >> On Aug 29, 1:17 pm, dave b wrote: >>> On 29 August 2010 08:28, Steve Holden wrote: >>> On 8/28/2010 6:10 PM, Graham Dumpleton wrote: > On Aug 28, 11:21 pm, dave b wrote: > So obviou

Re: potential issue re in memory django file uploading.

> OK, so you don't believe the advice you are getting, which is that of > the many issues a Django sit will face this is a relatively low > probability attack. That's fair enough - a vulnerability is a > vulnerability, after all, no matter how improbable, and not everyone > will set up their produc

Re: potential issue re in memory django file uploading.

On 8/29/2010 7:43 AM, dave b wrote: >> OK, so you don't believe the advice you are getting, which is that of >> the many issues a Django sit will face this is a relatively low >> probability attack. That's fair enough - a vulnerability is a >> vulnerability, after all, no matter how improbable, and

Re: potential issue re in memory django file uploading.

> An attacker could also assemble a powerful explosive device and detonate > it near enough your hosting service to take your site down. What > counter-measures are you going to take against that? Good question. I have two cats and they like to lick people ^^ They are a bit friendly I guess. Do yo

Re: potential issue re in memory django file uploading.

On 8/29/2010 8:07 AM, dave b wrote: >> An attacker could also assemble a powerful explosive device and detonate >> it near enough your hosting service to take your site down. What >> counter-measures are you going to take against that? > > Good question. I have two cats and they like to lick peopl

Re: potential issue re in memory django file uploading.

> Anyway, since you have done your civic duty there's a good chance that a > fix will find its way into some future version. Thanks for being a good > citizen. Django is an awesome project and. However, a bug is a bug. I don't care if it is a security bug or not, a bug *should* get fixed. FYI: I

Re: potential issue re in memory django file uploading.

On Aug 29, 9:43 pm, dave b wrote: > > OK, so you don't believe the advice you are getting, which is that of > > the many issues a Django sit will face this is a relatively low > > probability attack. That's fair enough - a vulnerability is a > > vulnerability, after all, no matter how improbable

Re: potential issue re in memory django file uploading.

On Sun, Aug 29, 2010 at 8:26 PM, dave b wrote: >> Anyway, since you have done your civic duty there's a good chance that a >> fix will find its way into some future version. Thanks for being a good >> citizen. > > Django is an awesome project and. However, a bug is a bug. I don't > care if it is a

Re: potential issue re in memory django file uploading.

below here. Just do remember, there is more than one way to run a httpd, some of us run our own custom stuff ;) and not everyone is using a setup like you have. --- Feature: Attacker crashes your django installation via file uploading As attacker I want to crash your django instal

Re: potential issue re in memory django file uploading.

ear, concise language exactly what conditions need to > > exist for a problem to occur. > > > Yours, > > Russ Magee %-) > > Morning. Will do so below here. > Just do remember, there is more than one way to run a httpd, some of > us run our own custom stuff ;) and n

Re: potential issue re in memory django file uploading.

/me rolls eyes. You have a valid point re /tmp, sorry I am used to mounting /tmp as /tmpfs - my mistake :) Ok lets be *really* clear the security problem still exists. An attack can in the limits set on the maximum post by the httpd / module in use upload a large file. > I don't actually use Djan

Re: potential issue re in memory django file uploading.

On Aug 31, 1:09 am, dave b wrote: > /me rolls eyes. > You have a valid point re /tmp, sorry I am used to mounting /tmp as > /tmpfs - my mistake :) > Ok lets be *really* clear the security problem still exists. > An attack can in the limits set on the maximum post by the httpd / > module in use u

Re: potential issue re in memory django file uploading.

On Mon, Aug 30, 2010 at 11:09 PM, dave b wrote: >> I don't actually use Django so not 100% sure, but yes there possibly >> isn't an equivalent of LimitRequestBody definable within Django unless >> can be done with middleware. > > Ok so you don't even use django, ok... > You know I think I missed y

Re: potential issue re in memory django file uploading.

>> Secure by default please! > > That's an easy epithet to throw around, but I disagree that it is > appropriate here. "Security" doesn't mean "stops the user from making > mistakes". Look like wsgi, apache2 and django all on ubuntu PLACE no size limits at all by default. Isn't that neat? I think

Re: potential issue re in memory django file uploading.

> > From my testing (granted this was run against something pre-1.2 so things > may have changed since then), as soon as you initiate the first file upload, > you're monopolizing the devserver process, preventing further attempts to do > the following 9 uploads until the first has completed (succes

Re: potential issue re in memory django file uploading.

On 08/30/10 10:09, dave b wrote: well you finish the tutorial(s) now and then you try to upload a file right? So you start uploading the file. Now because (I assume you are still using the django built in webserver) why don't you play with this a bit, start uploading say 10 1gb files(all at once)

Re: potential issue re in memory django file uploading.

On 8/30/2010 9:09 PM, dave b wrote: >>> Secure by default please! >> >> That's an easy epithet to throw around, but I disagree that it is >> appropriate here. "Security" doesn't mean "stops the user from making >> mistakes". > > Look like wsgi, apache2 and django all on ubuntu PLACE no size limits

Re: potential issue re in memory django file uploading.

On Tue, Aug 31, 2010 at 9:09 AM, dave b wrote: >>> Secure by default please! >> >> That's an easy epithet to throw around, but I disagree that it is >> appropriate here. "Security" doesn't mean "stops the user from making >> mistakes". > > Look like wsgi, apache2 and django all on ubuntu PLACE no

Re: potential issue re in memory django file uploading.

> And, for the record, the fact that Ubuntu or Debian have chosen these > defaults doesn't make Apache insecure either. System defaults exist to > make it easy and obvious to get something started. A responsible > sysadmin for a public-facing webserver shouldn't be using *any* > OS-provided default

Re: potential issue re in memory django file uploading.

> On 8/30/2010 9:09 PM, dave b wrote: >> Do not pass go do not collect profit! ... >> Put your hands up in the air like you just don't care! ... >> blahblahblalbha sssh listen. ... On Tue, Aug 31, 2010 at 9:42 AM, Steve Holden wrote: > Frankly, at this stage you can stick it up your ass and set

Re: potential issue re in memory django file uploading.

Thanks for the reminder. I apologize. regards Steve On Aug 30, 2010 10:04 PM, "Russell Keith-Magee" wrote: >> On 8/30/2010 9:09 PM, dave b wrote: >>> Do not pass go do not collect profit! > ... >>> Put your hands up in the air like you just don't care! > ... >>> blahblahblalbha sssh listen. > ..

Re: potential issue re in memory django file uploading.

On 31 August 2010 12:04, Russell Keith-Magee wrote: >> On 8/30/2010 9:09 PM, dave b wrote: >>> Do not pass go do not collect profit! > ... >>> Put your hands up in the air like you just don't care! > ... >>> blahblahblalbha sssh listen. > ... > > On Tue, Aug 31, 2010 at 9:42 AM, Steve Holden wrot

Re: potential issue re in memory django file uploading.

On Tue, Aug 31, 2010 at 10:01 AM, dave b wrote: >> And, for the record, the fact that Ubuntu or Debian have chosen these >> defaults doesn't make Apache insecure either. System defaults exist to >> make it easy and obvious to get something started. A responsible >> sysadmin for a public-facing web

Re: potential issue re in memory django file uploading.

> His response is to say he will escalate this to some other security > forum. We can only assume that this is a threat that he will raise > merry hell until we do what he says. Right first: Yes I am sorry for the 9 or so posts :) I am only human. Right. Um no that's not a threat. That's being re

Re: potential issue re in memory django file uploading.

Ok no movement :) Lighttpd has a default limit of 2gb, cherokee seems to have the same. Pin it on the httpd all you like - but the default apache has no limit (0 - unlimited :) ). http://httpd.apache.org/docs/2.0/mod/core.html#limitrequestbody -- The better part of valor is discretion. -

Re: potential issue re in memory django file uploading.

On Fri, Sep 3, 2010 at 2:04 PM, dave b wrote: > Ok no movement :) Nor is there likely to be. Insofar as you've identified a problem at all, it's a problem in a piece of software that isn't Django, and you've ignored multiple people who've pointed that fact out to you (along with the fact that Apa