View Single Post
  #2 (permalink)  
Old August 19th, 2004, 12:51 PM
Imar's Avatar
Imar Imar is offline
Wrox Author
Points: 72,055, Level: 100
Points: 72,055, Level: 100 Points: 72,055, Level: 100 Points: 72,055, Level: 100
Activity: 0%
Activity: 0% Activity: 0% Activity: 0%
 
Join Date: Jun 2003
Location: Utrecht, Netherlands.
Posts: 17,086
Thanks: 80
Thanked 1,587 Times in 1,563 Posts
Default

Fortunately, you can't set the value of a file control.
Combined with this body tag:

<body onload="document.forms[0].submit();">

you could easily steal any documents you want, provided you'd know the name.

You also cannot upload from an FTP site. The input type="file" control uses a local or network path, but AFAIK, you cannot get it to upload files from an FTP server.

What exactly are you trying to accomplish?

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
Reply With Quote