> does anybody has experience with the MultipartRequest-Classes
> which are described in Jason Hunters book "Servlet Programming"?
> in the constructor of this classes i can define the save-directory.
> i my case the directory-name is dynamicly and included in the req-body
> (it's a form input-field).
> but i can't read the parameter out with req.getParameter("var") because
> the encryption-type is "multipart/form-data"...
> perhaps i don't understand how to use this classes... or it's by design.
Sounds like a security nightmare you are creating. You generally should not
allow any sort of full path specification on the client's side to prevent
mischief. What we did, is we use a common uploading area specified in the
servlet, and then if the file upload is okay and is accepted by our system,
we rename it to its "final resting place." Hope that helps you too.
David
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
FAQs on JSP can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
