- see footer for list info -<
Paul Swingewood wrote:
- see footer for list info -<
Cheers. I just added the octet and it worked. Just wondered why it wouldn't accept it as just flv and had to have both. You'd think that ADOBE would allow uploads of a mime type they created ... LOL - without all the other bit ..

This actually has nothing to do with Adobe. The http client is responsible for sending the correct content type to the server as part of the posted form data. Your web browser screwed up and sent the wrong content type to the server.

This is one good reason to avoid ever using the accept attribute of cffile when uploading.

Another reason to avoid using the accept attribute is that, as far as I'm aware anyway, it doesn't help secure your file upload scripts.

Seeing as the client is responsible for telling the server the content type of the posted data, it stands to reason that using the accept attribute doesn't actually help with security at all. I have to admit though, that I've never actually tried to circumvent this and it is possible that CF does some checking of the posted data to make sure that the content type matches the content (a bit like IE does). All the same, better safe than sorry IMO.


Mark
_______________________________________________

For details on ALL mailing lists and for joining or leaving lists, go to 
http://list.cfdeveloper.co.uk/mailman/listinfo

--
CFDeveloper Sponsors:-
- cfdeveloper Hosting provided by www.cfmxhosting.co.uk -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to volunteer your help -<

Reply via email to