Birgit,

you asked,
> But this only works when the image is uploaded via a form field.
> What I would like to do, however, is to parse content of a textarea field
> for image names and then upload all of them, so there will be no such
> field.
>
> The only workaround I can think of is to use Javascript to create form
> values for images on submit, but isn't there a simpler, perl-ish solution?

I'm pretty sure that the only way to get a file from a users machine is to
explicitly use a 'file' text field. (i.e. a browse box).

Otherwise, what would stop somebody creating a hidden field with the value
of '/etc/passwd' and being able to silently upload that file when the user
presses submit.

I think the best place to check for the specs on forms would be w3.org

Carl.

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to