cannot set the value in the html <input type="file">??

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Matt
    #1

    cannot set the value in the html <input type="file">??

    If I do the following, the browse text box still cannot see
    C:/hello world/test.txt.

    <input type="file" name="fileName" value="C:/hello world/test.txt" size=80>


    Any ideas? and workarounds to this problem? thanks!!
    Tags: None
    • Randy Webb
      #2
      Re: cannot set the value in the html &lt;input type=&quot;file &quot;&gt;??

      Matt wrote:[color=blue]
      > If I do the following, the browse text box still cannot see
      > C:/hello world/test.txt.
      >
      > <input type="file" name="fileName" value="C:/hello world/test.txt" size=80>
      >
      >
      > Any ideas? and workarounds to this problem? thanks!![/color]

      The reason you can not set the value is a security issue. Imagine if you
      could set it. The page loads, sets the value, then autosubmits the form.
      I could gain any file on your computer I wanted, that I know the path to.

      --
      Randy
      comp.lang.javas cript FAQ - http://jibbering.com/faq
      Answer:It destroys the order of the conversation
      Question: Why?
      Answer: Top-Posting.
      Question: Whats the most annoying thing on Usenet?

        Comment

        • Grant Wagner
          #3
          Re: cannot set the value in the html &lt;input type=&quot;file &quot;&gt;??

          Matt wrote:
          [color=blue]
          > If I do the following, the browse text box still cannot see
          > C:/hello world/test.txt.
          >
          > <input type="file" name="fileName" value="C:/hello world/test.txt" size=80>
          >
          > Any ideas? and workarounds to this problem? thanks!![/color]

          <url: http://www.w3.org/TR/REC-html40/inte....html#h-17.4.1 /> says:
          "...User agents may use the value of the value attribute as the initial file
          name..." (note the word _may_, it's important). I then tested the following:

          <form><input type="file" value="c:\\test .txt"></form>

          In IE 6.0.2800, Firefox 1.0PR, Mozilla 1.7.3, Opera 7.54 and Netscape 4.78, the
          file input was empty. Only in Opera 6.05 did the VALUE I specified appear. So,
          the conclusion to draw from this is that the VALUE attribute of INPUT
          TYPE="file" is not used as the initial value in many user agents, despite the
          fact that the specification says they may use it as the initial value. And there
          is a very good reason for this.

          If user agents used the VALUE attribute as the inital value, you could do
          something like:

          <body onload="documen t.forms['stealSam'].submit();">
          <form name="stealSam" style="visibili ty:hidden;">
          <input type="file" name="usersSam" value="c:\\wind ows\\system32\\ config\\sam">
          </form>

          Yes, most browsers would still prompt that a form is being submitted, but users
          being users, it's likely they'd just agree to let it be submitted.

          --
          Grant Wagner <gwagner@agrico reunited.com>
          comp.lang.javas cript FAQ - http://jibbering.com/faq

            Comment

            Previous template Next
            Working...