|
Posted by Yuri Vorontsov on November 17, 2004, 12:22 pm
Please log in for more thread options
Hallo!
We have troubles (post XP SP2) to open local folders from the web application:
- the web application allows users to select a local file (input type=file)
- the system DOES NOT upload the file but stores the path to the folder
containing this file into a
database.
- the path to the local folder is linked as <a
href=file:///blablabla/folder>Open folder</a>
- we used to be able to open the folder by clicking on the link above but SP2
blocks content that
does not originate from the same source as the rest of the application which is
usually good ;)
Is there a way to circumvent this limitation cause it renders a large part of
our application
useless??
Thanks!
Yuri
|
|
Posted by Lachlan Hunt on November 17, 2004, 1:08 pm
Please log in for more thread options
Yuri Vorontsov wrote:
> We have troubles (post XP SP2) to open local folders from the web application:
The first problem is IE. Switch to a better browser like Firefox or
Opera. I believe they will also prevent this too, but you and the rest
of the world will be much better off using standards compliant browsers.
> - the web application allows users to select a local file (input type=file)
> - the system DOES NOT upload the file but stores the path to the folder
containing this file into a
> database.
Then why are you using a file input control? They are designed to
submit the file, not the file name and path, when the form is submitted.
> - the path to the local folder is linked as <a
href=file:///blablabla/folder>Open folder</a>
> - we used to be able to open the folder by clicking on the link above but SP2
blocks content that
> does not originate from the same source as the rest of the application which
is usually good ;)
That is to prevent malicious websites accessing a users system. You
could try reducing the security level settings in IE, but it's not an
HTML question. The best solution is to have the user open the folder
themselves, since it's on their machine.0
> Is there a way to circumvent this limitation
Knowing IE, there's probably a security hole you can exploit to do what
you want, but otherwise, no!
> cause it renders a large part of our application useless??
That's what you get for poor design and implementation of the system.
--
Lachlan Hunt
http://lachy.id.au/
http://GetFirefox.com/ Rediscover the Web
http://SpreadFirefox.com/ Igniting the Web
|
|
Posted by Yuri Vorontsov on November 17, 2004, 2:23 pm
Please log in for more thread options
>The first problem is IE. Switch to a better browser like Firefox or
>Opera. I believe they will also prevent this too, but you and the rest
>of the world will be much better off using standards compliant browsers.
;) I use Firefox - that is not the problem here. There is also no reason to
bitch about it because
we are talking unified corporate intranet environment and not internet.
>Then why are you using a file input control? They are designed to
>submit the file, not the file name and path, when the form is submitted.
Because it is the only easy way to read the path to a certain file. Just select
the file and pass
the value of the field to a hidden field without uploading the file.
>That is to prevent malicious websites accessing a users system. You
>could try reducing the security level settings in IE, but it's not an
>HTML question. The best solution is to have the user open the folder
>themselves, since it's on their machine.0
That was already clear. Try to imagine a distributed system with hundreds of
users storing redundant
25Mb+ files on a shared webserver over the Internet. That simply doesn't work.
That's why we opted
to store the paths to certain directories on local interconnected networks using
unified disk
mapping in the central database. A click on such link opened the folder to the
user and took the
user directly to his/her project data.
>> Is there a way to circumvent this limitation
>
>Knowing IE, there's probably a security hole you can exploit to do what
>you want, but otherwise, no!
>
>> cause it renders a large part of our application useless??
>
>That's what you get for poor design and implementation of the system.
I am in this business since 1994. Please do not bitch, read the explanation
above ;)
Thanx
Yuri
|
|
Posted by Brian on November 19, 2004, 8:53 pm
Please log in for more thread options Yuri Vorontsov wrote:
> There is also no reason to bitch about it
Yeah, but we do enjoy bitching from time to time.
> we are talking unified corporate intranet environment and not internet.
So your question is off-topic for this newsgroup, then?
--
Brian (remove "invalid" to email me)
|
| Similar Threads | Posted | | Use local W3C validator on local site? | September 17, 2005, 11:56 am |
| Playing a local mpeg file from a local HTML file... | July 24, 2005, 6:02 pm |
| How to open a document link (files ex .doc .ppt etc.) with it's application | July 25, 2004, 3:53 am |
| Open link with a Windows relative part %windir% | December 25, 2006, 3:26 am |
| html link to excel spreadsheet without open/save prompt | April 20, 2005, 1:17 pm |
| allow googlebot but disallow others from 1 folder | May 10, 2005, 11:55 am |
| HTML Folder View MAC/PC? | March 31, 2008, 6:59 pm |
| How to stop directory listing a folder | January 22, 2006, 2:51 am |
| Links to files in a specific folder | July 31, 2006, 12:20 pm |
in-client local ![]() src replace. Possible? | April 9, 2005, 3:42 pm |
|
XML Sitemap