ColdFusion 9.0.1  -  Feature 3041712

Created on Thursday, June 24, 2010

Login for more options

Title

Bug 83446:Please provide access to the file upload information, possible via a function, to make handling uploads easier

Description

Problem:

Please provide access to the file upload information, possible via a function, to make handling uploads easier. Currently the upload is moved twice, once to a temporary directory to retrieve it's original filename and size, then again to the final destination. Otherwise an invalid file may temporarily be held somewhere you don't want it (possible attack vector).
Method:

The information is currently retrievable using form.getPartsArray() but this isn't ideal and since it isn't official there is obviously a chance it could change in future versions. See the link below where I demostrate a function that retrieves this information without moving the file.
Result:

Test Configuration

06/24/2010

App Language(s) English
OS Language(s) English
Platform(s) Platforms All
Browser(s)

Notes (1)

  • MisterDai

    6:35:53 AM GMT+00:00 Mar 5, 2012

    Can't see how this has been marked as "NotEnoughTime". The information is all ready present in form.getTempFiles() providing access to all uploaded files via java.io.File pointers as a structure with each form field name. Plus it appears to cope with HTML5 uploads via arrays. Isn't it just exposing what's already there?

Duplicate ID
Reported By MisterDai

Status

State Closed
Status Deferred
Reason NotEnoughTime

Importance

Priority 3-High
Frequency Unknown
Failure Type Unspecified
Product Area File Management

Build

Found In Build 0000
Fixed In Build

Attachments (0)

No Files Attached

Votes (0)

Your session has expired! Click to login
Current form data will be preserved

Cancel