Postbacks and Input Type=File controls

[Karl Seguin]

no. that would be a serious security hole. Why not just upload the file to
the server and display the static filename path in a label of a readonly
textbox....the user won't know any differnetly.

Karl

"Chuck Haeberle" <chaeberl@contractor.nocienaspam.com> wrote in message
news:%23UAVWteUDHA.1196@TK2MSFTNGP10.phx.gbl...

> Is there anyway to get around the read-only nature of the HtmlInputFile
> control's value property?
>
> I have a web-form for uploading files but the user is expected to provide
> additional data about the file being uploaded, which means some

round-trips

> to server events as the user populates the required data. This means the
> user can select a file, then have the file path/name lost during the round
> trip.
>
> I need to find a way around this issue so the user doesn't keep having to
> re-select the file when they fill out the rest of the form.
>
> Help!
>
> Thanks,
>
> Chuck Haeberle
>
>

[Chuck Haeberle]

I recognize the security holes - but I do not want to persist the uploaded
file until the user is ready to commit the action - in part because whether
the file is stored on a file server or in a blob in the database is
dependant upon the user's selections.

I have tried various means of caching the uploaded file in the Session (ugh)
(failed - the reference to an HttpPostedFile itself becomes invalid on on
the next post it seems) or Viewstate (failed, httpPostedFile is not a
'sizable' object). My next considered option is to use GetInputStream,
stream the uploaded file into a MemoryStream, cache that in either viewstate
if it will let me, or in the Session otherwise, capture the uploaded
filename and content type and other info, cache them as well, display the
label you recommended, and when the user finalizes, stream it out again into
my attachmentmanager component. Ugh again.

Why do the users have to make the requirements so annoying. :)



"Karl Seguin" <kseguin##crea.ca> wrote in message
news:OpmUBtfUDHA.2012@TK2MSFTNGP10.phx.gbl...

> no. that would be a serious security hole. Why not just upload the file

to

> the server and display the static filename path in a label of a readonly
> textbox....the user won't know any differnetly.
>
> Karl
>
> "Chuck Haeberle" <chaeberl@contractor.nocienaspam.com> wrote in message
> news:%23UAVWteUDHA.1196@TK2MSFTNGP10.phx.gbl...

> > Is there anyway to get around the read-only nature of the HtmlInputFile
> > control's value property?
> >
> > I have a web-form for uploading files but the user is expected to

provide

> > additional data about the file being uploaded, which means some

> round-trips

> > to server events as the user populates the required data. This means

the

> > user can select a file, then have the file path/name lost during the

round

> > trip.
> >
> > I need to find a way around this issue so the user doesn't keep having

to

> > re-select the file when they fill out the rest of the form.
> >
> > Help!
> >
> > Thanks,
> >
> > Chuck Haeberle
> >
> >

>
>