Microsoft.XMLHTTP sending a file

mikevandike used Ask the Experts™
Hi I am currently re-developing a web based front end for an estate agent to manage their propertys. I have decided to use a Microsoft.XMLHTTP object to communicate between the client and server. My problem is got to do with sending a file with this. The client is composed of the usual GUI components which the data can be easily retrieved from for sending to the server but it also contains a file element for selecting a picture of the property to be uploaded. How do I get the data from this so that it can be uploaded to the server using the Microsoft.XMLHTTP object. I have found a bit of code on the net but it is no use to me because it would involve changing the security in "Internet Options" which I have no control over.

   <INPUT id=btn_send name="btn_send" type=button value="FILE SEND">
   <DIV id=div_message>Ready</DIV>


// files upload function
function btn_send.onclick()
   // create ADO-stream Object
   var ado_stream = new ActiveXObject("ADODB.Stream");

   // create XML document with default header and primary node
   var xml_dom = new ActiveXObject("MSXML2.DOMDocument");
   xml_dom.loadXML('<?xml version="1.0" ?> <root/>');
   // specify namespaces datatypes
   xml_dom.documentElement.setAttribute("xmlns:dt", "urn:schemas-microsoft-com:datatypes");

   // create a new node and set binary content
   var l_node1 = xml_dom.createElement("file1");
   l_node1.dataType = "bin.base64";
   // open stream object and read source file
   ado_stream.Type = 1;  // 1=adTypeBinary
   // store file content into XML node
   l_node1.nodeTypedValue = ado_stream.Read(-1); // -1=adReadAll

   // we can create more XML nodes for multiple file upload

   // send XML documento to Web server
   var xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");"POST","",false);
   // show server message in message-area
   div_message.innerHTML = xmlhttp.ResponseText;

Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2013

When you want to do something that loose, you are not going do it without playing with the security setting.

Is there some reason why you have rejected just using a conventional form to submit the data?

This kind a stuff is an invitation to security breaches, especially when you are going send data a as binary stream hidden in XML.



I am in the process of re-developing a website and am currently working on the admin section for updating the database. I have decided to use some new technologies for doing this as a kind of learning expierence for me. You can check out a prototype at.

I am using a servlet to generate XML for the client.
to get a list of all property Id's.
to get all Info on an individual property.

My aim really is to try and give the feel of a native application.(page not reloading ect) I have done this kind of thing before and used hidden frames to post the data to the server and callback javascripts. But as I said before It is more of a learning thing for myself than it is necessary. I also am trying to use XML as much as possible because I am interested in its potential usability.

I understand fully the security ricks involved in accessing files on the client side but you would think that once a user selects a file with the File input control you could access it through the code. Why is this not possible.



Also it there a cross browser version of the Microsoft.XMLDOM object.
Become a CompTIA Certified Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

sure there is.

var xmlhttp;
        xmlhttp = new ActiveXObject("Msxml2.XMLHTTP");
        xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        xmlhttp = false;

if(!xmlhttp && typeof XMLHttpRequest!='undefined'){
        xmlhttp = new XMLHttpRequest();
  xmlhttp = false;
in the part where you create XML nodes using XMLDOM, use simple Javascript

var xmlNodes='<node1><node2>some data will go here...</node2></node1>';

and send then via xmlhttp
Top Expert 2013
Mozilla based browsers use RDF instead of XMLDOM, but they are behind in XML in general because they won't compromise on security issues:

To do a POST in Moz browsers the code is:"UniversalBrowserRead");
var httpRequest = new XMLHttpRequest();"POST", url, false);

However I suspect that will also run into security issues. It is not HTTP that is the but browser security, you probably need to use a custom JAVA browser or write an activex control to be as intrusive as that is. If I need something like that I would give it to a VB or C++ developer to develop the client code.  It's just not something I would do with  web page.

Michael KrumpeSolutions Architect
To keep things simple... dont use the WinXMLHTTP object at all. I made that mistake myself when trying to do very simular things that you are doing, and that object complicates issues if you are not actually trying to use its extended DOM functionality.

So use what?

The XMLHTTP object itself uses a smaller object on the server called the WinHTTP object. It will do what you are looking for.

Now, in your case, what you will want to do is use the post function, just as if you were posting a form and set the mime type of the post to multipart, just as if you were making a form to do the same.

That is your conceptual solution and will work. Your exact symantecs on how you plan to code it, I suggest view the WinHTTP examples in the link above and put the post fields together per your needs. Done.

Keep it simple,


Michael KrumpeSolutions Architect

If you use the WinHTTP object like I am suggesting, you will not need to do any client side scripting as others have suggested and the file will go out from the server itself.



mkrumpe I dont get what you are saying. It is not a microsoft server and the sever side language I am using is Java. All I want to know is once a user selects a file with the normal file input control. Is their any way on the client side I can access that files data without changing the security settings or is the only way to send that file to the server by clicking on a submit button or using form.submit();
mkrumpe, can you please provide a little example of what you are describing..? It is very interestning... :)
Michael KrumpeSolutions Architect

The only example I could show you would be in .asp. But the winhttp object should be able to be used by any language.

Is that ok?
aaah, I think I got what you saying... post data by multipart and then send xml down to the browser using xmlhttprequest right?
here, I opened up another topic
mkrumpe, post your suggestion in there..

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial