- August 9, 2018 at 12:58 pm #26592
Hi a few questions regarding File Upload elements:
Question 1: No URL
Looking at your getValueHTML() function for File Upload elements I have a question.
Under what circumstance? would a file upload element have no URL?
Question 2: File size
File size attribute is that in bytes? So dividing value by 1024 will give k?
Question 3: File type
Is that MIME type? And how is that determined at time of upload? By extension?
Question 4: Security
If a file type is not in in the included list. Can a user rename file and bypass the check?
Is there a way to protect the files once uploaded? Ie must be logged in to access? Any suggestions?
Thanks againAugust 9, 2018 at 9:09 pm #26602
AllySupport StaffAugust 10, 2018 at 12:07 am #26607
1. Not sure what benefit file upload is without file being uploaded?? My head hurts on this one
2,3. Awesome, the link helps heaps
4. Ok, thought so
5. Was aware of this but didn’t know how it would affect the plugin when saving files. Is it excused from security check?August 14, 2018 at 5:58 pm #26664
AllySupport StaffAugust 14, 2018 at 10:57 pm #26668
Thank you very much for that explanation. Close ticket
You must be logged in to reply to this topic.
- darko on Quform form has dynamic ID's – how to make static?7 hours, 59 minutes ago
- Ally on Multiply Textfield Input x 32 days, 17 hours ago
- bruellerwerbung on Multiply Textfield Input x 32 days, 17 hours ago
- katw on Calendar date picker > disable next/previous year arrows2 days, 21 hours ago
- Ally on export entries – custom date search rather than submitted date2 days, 21 hours ago
- Ally on Calendar date picker > disable next/previous year arrows2 days, 21 hours ago
- katw on Calendar date picker > disable next/previous year arrows3 days, 7 hours ago
- Ally on Form entries duplication3 days, 14 hours ago
- Ally on New hooks and updated documentation (v2.5 release)3 days, 15 hours ago
- Form won't show – "Required" doesn't save by MediPr16 hours, 10 minutes ago
- i have problem image now show this is new problem last time is working fine but by mr199117 hours, 27 minutes ago
- quform 2.5.0 by jmjoh4 days, 16 hours ago
- Translation: "Default" text translation in zone selector by celluleweb3 days, 15 hours ago
- New hooks and updated documentation (v2.5 release) by katw3 days, 15 hours ago
- Fatal error: Uncaught Error: Class 'Quform_Element' not found in /home/… by danielsami5 days, 13 hours ago
- Multiply Textfield Input x 3 by bruellerwerbung2 days, 17 hours ago
- conditional pages by donmoreno3 days, 16 hours ago
- 'Installation with existing form' question – which php file? by bb33 days, 16 hours ago
- No notification by delfault? by celluleweb3 days, 16 hours ago