>1) use correct mime type for excel files - it is NOT application/msexcel >2) the accept attribute, afaik, is for <cffile> tag, not for <cfinput>, >and is executed on the server >3) the accept attribute, afaik, will only check the extension of >uploaded file - even if i rename my .exe file as .xls it will allow the >file to be uploaded. thought i should mention it just in case...
thanks Azadi, you made a good point about someone changing their extension. is there anyway to detect? thanks ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion is delivering applications solutions at at top companies around the world in government. Find out how and where now http://www.adobe.com/cfusion/showcase/index.cfm?event=finder&productID=1522&loc=en_us Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:293537 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
