Page 1 of 1

A scary thought...

Posted: Mon Aug 18, 2003 7:29 pm
by Bongulim
Can a web page just grab any file it wants to the server? think about it: when doing an upload to a hosting service, it usually gives a form with a space to enter filename and a browse button. than you browse and click upload, and it sends the file to the server. what prevents the server from doing so for virtually any file and without notifieng you??

Posted: Mon Aug 18, 2003 9:00 pm
by evilmonkey
Technically, you do. you can't just have a script upload any file. A user has to first "post" it via an HTML form.

Posted: Tue Aug 19, 2003 8:48 am
by Bongulim
what about just instead of clicking browse and submit, just have some javascript to automatically send, just like in clicking submit, some file... I don't see why it's not possible.

Posted: Tue Aug 19, 2003 9:01 am
by phice
Try it out.