The Underscore Archives

Make sure you filter the filename and protect the upload folder to prevent
any remote code executions.

Mark

On 1/22/07, Oliver Humpage <oliver at watershed.co.uk> wrote:
>
> on 22/1/07 17:03, Karl McClelland at karlspringfield at googlemail.com wrote:
>
> > Hi everyone,
> >
> > Has anyone any insight to adding an upload document function to a
> webpage.
>
> If you're asking people to upload large documents (over a couple of MB)
> then
> it's worth using something like filechucker to give the user some feedback
> as to the status of their upload. Otherwise the user is left staring at a
> blank screen for ages, with no idea if the upload is working or not.
>
> Oliver.
>
>
> --
> underscore_ list info/archive -> http://www.under-score.org.uk
>



-- 
Mark Chitty
web: www.thisliquidspace.com
email: mark.chitty at thisliquidspace.com
mobile: 0777 3392821
skype: markchitty