Unless something has changed in recent versions of CF, in addition to
cffile's accept arg, after your </cftry> you should always check extension
of file saved to disk and, if illegal, immediately delete file. Reason:
those mimetypes come from end-user's browser and can be
wrong/spoofed/unpredictable (i.e. you won't find a set-in-stone one-to-one
relationship between mimtypes and extensions...it changes based on OS,
browser, etc).

<cfif not listfindnocase(listOfOkExtensions, listlast(cffile.serverfile,
"."))>
<cffile action="delete"
file="#session.currentDirectory##cffile.serverfile#">
<cfset session.sysmessage = "Please upload images of type: .jpg, .gif or
.png">
<cflocation url="folder-view.cfm">
</cfif>

Having said that, I concur with Andrew: try "to cfdump and abort in
the cfcatch to see what the message contains."

On Thu, Jun 30, 2011 at 1:56 AM, Andrew Scott <andr...@andyscott.id.au>wrote:

>
> Jenny, I am going to assume that you have tried to cfdump and abort in the
> cfcatch to see what the message contains. Failing that I do know that some
> of these messages have hidden characters and will not match even if you
> try.
>
> I don't have the link handy at the moment, but I did write a blog about
> this
> sort of thing some months ago.
>
>
> Regards,
> Andrew Scott
> http://www.andyscott.id.au/
>
>
>
> > -----Original Message-----
> > From: Jenny Gavin-Wear [mailto:jenn...@fasttrackonline.co.uk]
> > Sent: Thursday, 30 June 2011 2:20 PM
> > To: cf-talk
> > Subject: CFFILE / CFCATCH
> >
> >
> > I'm trying to cfcatch cffile mime type errors.
> >
> > I can't see where I'm going wrong.
> >
> > <cftry>
> > <cfoutput>
> > <cffile action="upload" attributes="normal"
> > destination="#session.currentDirectory#"
> > filefield="form.fileField" nameconflict="overwrite" accept="image/jpeg,
> > image/jpg, image/pjpeg, image/gif, image/png"> </cfoutput> <cfcatch
> > type="any"> <cfif isdefined("cfcatch.Message") and findnocase("not
> > accepted", cfcatch.Message)> <cfset session.sysmessage = "Please upload
> > images of type: .jpg, .gif or .png"> <cflocation url="folder-view.cfm">
> </cfif>
> > </cfcatch> </cftry>
> >
> >
>
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:345952
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to