FreewayTalk

2 replies to this thread. Most Recent

Mutsaers Video Recordings

26 Feb 2013, 2:30 pm

[Pro] "make file upload field"

In my PHP contact form I incorporated a textfield and applied the “make file upload field” action to this field. When I choice a file and send the form I see “item1 : namefile.xxx” however the file is not uploaded, it is just the name of the file. Not in the root of freeway hosting nor in the resource file. Anyone knows what I do wrong ?

www.mutsaers-vr.nl

Joe Billings

26 Feb 2013, 4:22 pm

You need a script that specifically handles file transfers (they’re not commonly found because of the security issues with uploading unknown files to web-servers). We recommend Forms To Go who have a great little application that automatically generates scripts for doing this, and adding content to databases and more. They also have great support: http://www.bebosoft.com/products/formstogo/

Joe

On 26 Feb 2013, at 15:30, Artivideo <email@hidden> wrote:

In my PHP contact form I incorporated a textfield and applied the “make file upload field” action to this field. When I choice a file and send the form I see “item1 : namefile.xxx” however the file is not uploaded, it is just the name of the file. Not in the root of freeway hosting nor in the resource file. Anyone knows what I do wrong ?

Joe Billings

Freeway & Exhibeo: Visual web design apps for Mac


http://www.softpress.com

Back to Top

waltd

26 Feb 2013, 4:25 pm

You need a form handler on your server to accept the file, safely transfer it to your desired folder, and handle any errors. By default, a file uploaded to a server goes into the /tmp folder, where it will be garbage collected in a very short period of time if nothing further is done with it.

There aren’t any Actions that do this. You might want to try FormsToGo for this, their handler does manage uploaded files. But I also seriously recommend that you don’t do this yourself at all, not without steeping yourself in the technical reasons why it will almost certainly cause your server to become an undead warrior in the zombie army of hacked servers.

Wufoo is a paid service where you can construct a form, inject it into your page with a few lines of JavaScript, and get the benefit of their ace team of security professionals taking the arrows for you.

I am sure I have written a file upload form handler in very few lines of code, it’s probably on Gist somewhere. I would not trust it in production without some serious anti-malware voodoo added, or a very serious password in front of it. (It’s fine to accept files from people you know.)

Walter

On Feb 26, 2013, at 10:30 AM, Artivideo wrote:

In my PHP contact form I incorporated a textfield and applied the “make file upload field” action to this field. When I choice a file and send the form I see “item1 : namefile.xxx” however the file is not uploaded, it is just the name of the file. Not in the root of freeway hosting nor in the resource file. Anyone knows what I do wrong ?

Freeway user since 1997

http://www.walterdavisstudio.com