tracker issue : CF-3041712

select a category, or use search below
(searches all categories and all time range)
Title:

Bug 83446:Please provide access to the file upload information, possible via a function, to make handling uploads easier

| View in Tracker

Status/Resolution/Reason: To Fix//

Reporter/Name(from Bugbase): David Boyer / David Boyer (MisterDai)

Created: 06/24/2010

Components: File Management, CFFile

Versions: 9.0.1

Failure Type: Unspecified

Found In Build/Fixed In Build: 0000 /

Priority/Frequency: Major / Unknown

Locale/System: English / Platforms All

Vote Count: 0

Problem:

Please provide access to the file upload information, possible via a function, to make handling uploads easier.  Currently the upload is moved twice, once to a temporary directory to retrieve it's original filename and size, then again to the final destination.  Otherwise an invalid file may temporarily be held somewhere you don't want it (possible attack vector).
Method:

The information is currently retrievable using form.getPartsArray() but this isn't ideal and since it isn't official there is obviously a chance it could change in future versions.  See the link below where I demostrate a function that retrieves this information without moving the file.
Result:

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3041712

External Customer Info:
External Company:  
External Customer Name: David Boyer
External Customer Email: 37221ACB4B0AA9E3992015A9
External Test Config: 06/24/2010

Attachments:

Comments:

Can't see how this has been marked as "NotEnoughTime". The information is all ready present in form.getTempFiles() providing access to all uploaded files via java.io.File pointers as a structure with each form field name. Plus it appears to cope with HTML5 uploads via arrays. Isn't it just exposing what's already there?
Comment by External U.
21911 | March 05, 2012 09:05:53 AM GMT