If you don't want use DAL facilities to handle uploads, then you must do it in pure python. The whole point for a framework is to behave consistently, use security best practices and give all of us a "best way" to follow, but that doesn't mean that web2py has "limits". If you don't want to store the attachment in a table (or a reference to its name), why bother with DAL ? Use your own code dealing with the usual cgi.FieldStorage and do your own things with it. If you use SQLFORM with manual uploads you kinda have no limits whatsoever (including truncating long file names if you chose windows as your server os), while using all the "useful bits" of avoiding directory traversal attacks, renaming the filename etc etc.
On Monday, July 1, 2013 12:38:15 PM UTC+2, Domagoj Kovač wrote: > > Is there any way that i can control this generated filename? For example > my filenames can be some sort of hash from current timestamp. > -- --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
