I would really appreciate it if someone could explain to me in detail how file upload works.
The reason I am asking is because a client of ours has implemented a global filtering system on the form scope, i.e. removing unwanted characters from the form scope. This is causing problems with the file upload, but I can't seem to make head or tails out of the process. I do know the following;
1. client selects file
2. clients submits form
3. file is uploaded by the browser
4. cf places the file in a temp directory
5. cffile is used to move the file into the appropiate directory
The one thing I cannot seem to get my head around is the fileField attribute on the cffile tag.
Lets say for example that the file input field is called fileToUpload, when I dump the fileToUpload sometimes it contains a directory, and sometimes it contains the contents of the file.
What does cffile do with the field name once it gets it?
Who can expand on the above process?
And most importantly, why is it erroring?
The error is:
Error in CFFILE tag
The form field specified in the CFFILE tag (FILETOUPLOAD) does not contain an uploaded file. Please be sure that you have specified the correct form field name.
The following is the regex that performs the removal of the unwanted characters.
// Horizontal tab
validString = addValidCharacter( validString, chr( 9 ) );
// Line feed, new line
validString = addValidCharacter( validString, chr( 10 ) );
// Carriage return
validString = addValidCharacter( validString, chr( 13 ) );
// Line space
validString = addValidCharacter( validString, chr( 32 ) );
// This string holds any other character strings that should be deleted, delimited by the pipe symbol
orClause = "|@@";
// Following are characters that are allowed
regularExpression = "[^-a-z0-9,./?!@()\_:#vali
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Correct me if I am wrong, but the file is uploaded to the webserver and form there to the cf server, the content of the file is not actually within the form scope?
> Don't understand what is "has implemented a global filtering system on the form scope". Maybe some explanation would be useful.
Loop over the form collection apply a regex to filter out chars on each itteration.
Can you tell me exactly what the fileField attribute on the cffile tag is used for?
I *thought* it was used to pass the file path to the tag, but when I dump the form scope it appeared that it sometimes was a path and other times the contents of the file, which made me think that what I thought I knew is wrong.
1. No magic here.
2. The entire request body is uploaded to the server (memory, temp file, etc). The actual file **IS** inside the request body. So, if this is what you mean under "form scope", than "yes" - it is in the form scope. After that the body is being parsed and split into parts.
3. fileField attribute indicates the actual part among [possibly] other parts in the body. As I said above in my example, "name" is the correct value for this attribute (in my case). Another form field is "user_name" and its value is "Joe Black". The file name, as it was on the remote computer is "file1.txt". And this is a text file.
4. Whatever CF displays as the result of CFDUMP for fileField? Should be the file itself. But this is CF internal stuff. So...
this is the code i use (basically)...AFAIK....Fil
<cfset request.ImgFilePath="C:\in
<!--- submit file --->
<form method="POST"
enctype="multipart/form-da
action="index.cfm?fuseacti
name="ImageUpload">
<input type="file" name="myimage" id="myimage" size="25" accept="image/" class="edit">
<INPUT type="hidden" name="PartnerID" value="#GetPartnerInfo.Par
<input type="submit" value="Submit" name="btnImg_ok">
<!--- Action file --->
<cfset varImageID = #createuuid()#>
<cffile action="UPLOAD"
filefield="Form.MYIMAGE"
destination="#request.ImgF
nameconflict="MAKEUNIQUE">
<CFQUERY name="GetImageDeleteRecord
Update tblpartners_addresses
SET PartnerGraphic = <cfqueryparam cfsqltype="CF_SQL_CHAR" value="#varImageID#"></cfq
WHERE tblpartners_addresses.part
</CFQUERY>
Business Accounts
Answer for Membership
by: INSDivision6Posted on 2005-03-08 at 19:17:36ID: 13492645
Don't understand what is "has implemented a global filtering system on the form scope". Maybe some explanation would be useful.
As about file upload, (actually, about "multipart/form-data" content type), the difference between "regular forms" and "file upload forms" that they use different method of transmitting data. First ones use "application/x-www-form-ur
Example of HTTP reuest that hits the server with one INPUT TYPE=TEXT and one INPUT TYPE=FILE (unrelated headers omitted):
--------------------------
Content-type: multipart/form-data, boundary=AaB03x
--AaB03x
content-disposition: form-data; name="user_name"
Joe Black
--AaB03x
content-disposition: form-data; name="pics"; filename="file1.txt"
Content-Type: text/plain
... contents of file1.txt ...
--AaB03x--
--------------------------
So, CF looks for the file data using the name of the form field. In the above case it is "pics". If you do something strange with "global filtering", you may alter the posted data in such a way that CF simply cannot split the data and/or find the data requested.