Microsoft.XMLHTTP sending a file

Hi I am currently re-developing a web based front end for an estate agent to manage their propertys. I have decided to use a Microsoft.XMLHTTP object to communicate between the client and server. My problem is got to do with sending a file with this. The client is composed of the usual GUI components which the data can be easily retrieved from for sending to the server but it also contains a file element for selecting a picture of the property to be uploaded. How do I get the data from this so that it can be uploaded to the server using the Microsoft.XMLHTTP object. I have found a bit of code on the net but it is no use to me because it would involve changing the security in "Internet Options" which I have no control over.

<HTML>
<HEAD><TITLE>File Send</TITLE></HEAD>
<BODY>
   <INPUT id=btn_send name="btn_send" type=button value="FILE SEND">
   <DIV id=div_message>Ready</DIV>
</BODY>
</HTML>

<SCRIPT LANGUAGE=JavaScript>

// files upload function
function btn_send.onclick()
{
   // create ADO-stream Object
   var ado_stream = new ActiveXObject("ADODB.Stream");

   // create XML document with default header and primary node
   var xml_dom = new ActiveXObject("MSXML2.DOMDocument");
   xml_dom.loadXML('<?xml version="1.0" ?> <root/>');
   // specify namespaces datatypes
   xml_dom.documentElement.setAttribute("xmlns:dt", "urn:schemas-microsoft-com:datatypes");

   // create a new node and set binary content
   var l_node1 = xml_dom.createElement("file1");
   l_node1.dataType = "bin.base64";
   // open stream object and read source file
   ado_stream.Type = 1;  // 1=adTypeBinary
   ado_stream.Open();
   ado_stream.LoadFromFile("c:\\sold.gif");
   // store file content into XML node
   l_node1.nodeTypedValue = ado_stream.Read(-1); // -1=adReadAll
   ado_stream.Close();
   xml_dom.documentElement.appendChild(l_node1);

   // we can create more XML nodes for multiple file upload

   // send XML documento to Web server
   var xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
   xmlhttp.open("POST","http://www.google.com",false);
   xmlhttp.send(xml_dom);
   // show server message in message-area
   div_message.innerHTML = xmlhttp.ResponseText;
}
</SCRIPT>


thanks
John.
mikevandikeAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

COBOLdinosaurCommented:
When you want to do something that loose, you are not going do it without playing with the security setting.

Is there some reason why you have rejected just using a conventional form to submit the data?

This kind a stuff is an invitation to security breaches, especially when you are going send data a as binary stream hidden in XML.

Cd&
mikevandikeAuthor Commented:
I am in the process of re-developing a website and am currently working on the admin section for updating the database. I have decided to use some new technologies for doing this as a kind of learning expierence for me. You can check out a prototype at.

http://www.aor.ie/admin/prototype

I am using a servlet to generate XML for the client.

http://www.aor.ie/aor/servlet/XMLData
to get a list of all property Id's.

http://www.aor.ie/aor/servlet/XMLDa...D=1070634500828
to get all Info on an individual property.

My aim really is to try and give the feel of a native application.(page not reloading ect) I have done this kind of thing before and used hidden frames to post the data to the server and callback javascripts. But as I said before It is more of a learning thing for myself than it is necessary. I also am trying to use XML as much as possible because I am interested in its potential usability.

I understand fully the security ricks involved in accessing files on the client side but you would think that once a user selects a file with the File input control you could access it through the code. Why is this not possible.

John.
mikevandikeAuthor Commented:
Also it there a cross browser version of the Microsoft.XMLDOM object.
CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

davidlars99Commented:
sure there is.

var xmlhttp;
 try{
        xmlhttp = new ActiveXObject("Msxml2.XMLHTTP");
 }catch(e){
  try{
        xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
  }catch(E){
        xmlhttp = false;
  }
 }

if(!xmlhttp && typeof XMLHttpRequest!='undefined'){
        xmlhttp = new XMLHttpRequest();
}else{
  xmlhttp = false;
}

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
davidlars99Commented:
in the part where you create XML nodes using XMLDOM, use simple Javascript

var xmlNodes='<node1><node2>some data will go here...</node2></node1>';

and send then via xmlhttp
COBOLdinosaurCommented:
Mozilla based browsers use RDF instead of XMLDOM, but they are behind in XML in general because they won't compromise on security issues:

http://www.mozilla.org/rdf/doc/

To do a POST in Moz browsers the code is:

netscape.security.PrivilegeManager.enablePrivilege("UniversalBrowserRead");
var httpRequest = new XMLHttpRequest();
httpRequest.open("POST", url, false);
httpRequest.send(xmlDocument);


However I suspect that will also run into security issues. It is not HTTP that is the but browser security, you probably need to use a custom JAVA browser or write an activex control to be as intrusive as that is. If I need something like that I would give it to a VB or C++ developer to develop the client code.  It's just not something I would do with  web page.

Cd&
Michael KrumpeSolutions ArchitectCommented:
To keep things simple... dont use the WinXMLHTTP object at all. I made that mistake myself when trying to do very simular things that you are doing, and that object complicates issues if you are not actually trying to use its extended DOM functionality.

So use what?

The XMLHTTP object itself uses a smaller object on the server called the WinHTTP object. It will do what you are looking for.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winhttp/http/winhttprequest.asp?frame=true

Now, in your case, what you will want to do is use the post function, just as if you were posting a form and set the mime type of the post to multipart, just as if you were making a form to do the same.

That is your conceptual solution and will work. Your exact symantecs on how you plan to code it, I suggest view the WinHTTP examples in the link above and put the post fields together per your needs. Done.

Keep it simple,

Michael

Michael KrumpeSolutions ArchitectCommented:
If you use the WinHTTP object like I am suggesting, you will not need to do any client side scripting as others have suggested and the file will go out from the server itself.

Michael
mikevandikeAuthor Commented:
mkrumpe I dont get what you are saying. It is not a microsoft server and the sever side language I am using is Java. All I want to know is once a user selects a file with the normal file input control. Is their any way on the client side I can access that files data without changing the security settings or is the only way to send that file to the server by clicking on a submit button or using form.submit();
davidlars99Commented:
mkrumpe, can you please provide a little example of what you are describing..? It is very interestning... :)
Michael KrumpeSolutions ArchitectCommented:
The only example I could show you would be in .asp. But the winhttp object should be able to be used by any language.

Is that ok?
davidlars99Commented:
aaah, I think I got what you saying... post data by multipart and then send xml down to the browser using xmlhttprequest right?
davidlars99Commented:
here, I opened up another topic
http://experts-exchange.com/Web/Q_21147124.html
davidlars99Commented:
mkrumpe, post your suggestion in there..
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Languages and Standards

From novice to tech pro — start learning today.