Posted by Jukka K. Korpela on 10/02/65 11:59

Scripsit Leif K-Brooks:

> bernhard.heinzel@gmail.com wrote:
>> I got a little problem with an upload form. Everytime I post the form
>> it only submits the filename without the path. But I need the path.
>
> Stop needing that. Modern browsers won't send it. It would be a
> security hazard.

It's more complicated than that. By the specs, a browser _may_ include the
filename in the submitted data; the meaning of "filename" is left
unspecified. And some browsers include the relative filename only (just the
"name part") whereas some browsers include a path name. Even if you get a
path name, what would you do with it? For all that you can know, it might
not be even a syntactically valid path name in the _server's_ file system.

As usual, asking _why_ the path name would be needed would probably get us
closer to the _real_ problem.

--
Jukka K. Korpela ("Yucca")
http://www.cs.tut.fi/~jkorpela/

[Back to original message]