Posted by David Dorward on 06/10/06 21:28
Yohan N. Leder wrote:
> OK, but it doesn't reply to my question. Do you confirm or not that an
> hidden field containing a client path will send data as a file field
> does ?
It won't. It would be a security hazard if it did. But you already have the
file on the server, so it would be a waste of bandwidth transferring all
that data again - which is why you generate a very-hard-to-guess identifier
instead.
--
David Dorward <http://blog.dorward.me.uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is
[Back to original message]
|