Posted by Angelo Zanetti on 09/28/53 11:25

Angelo Zanetti
Z Logic
www.zlogic.co.za
[c] +27 72 441 3355
[t] +27 21 469 1052



Jasper Bryant-Greene wrote:

> angelo@zlogic.co.za wrote:
>
>> Well basically i need it for an "add products" page and if the users
>> doesnt fill
>> in all the fields correctly I display some error message as well as
>> populate the
>> textfields and dropdown lists with the values they previously
>> entered, so if
>> they entered/selected the file I want to display it again so they
>> don't have to
>> upload the file again. I know that I could do it without the user
>> knowing
>> (backed) but then they might think they have to select the file again
>> because
>> the upload field will be blank.
>
>
> Please don't top-post. You can *NEVER* set an initial value for a file
> upload field. This would be a HUGE security risk. Imagine (on a Linux
> system):
>
> <input type="file" name="myfile" value="/etc/passwd">
>
> You need to alter your design so that this is unnecessary, for example
> as suggested by someone else -- don't display the upload box and
> display a message saying it is already uploaded, maybe with a link to
> re-upload.
>
>

YEAh thanks I thought it wasn't possible, I'll look at different options
in terms of design and user interaction.
thanks guys!
ciao

[Back to original message]