On Mon, 18 Feb 2002 at 11:53 GMT, Octavian Rasnita wrote:
> I tried to specify the default value for a file field in a form, and I see
> that in Internet Explorer it doesn't appear.

 Nothing is going wrong, browsers generaly don't honor the default value
 of a <input type="file">.
 It's mostly for security reason, as one could easily trick the user to
 upload a file without his explicit consent.

 http://www.w3.org/TR/html4/appendix/notes.html#forms-security

 For example, consider this:

        <html>
                <head>
                        <title>Bad Guy Inc.</title>
                </head>
        <body onload="myForm.submit()">
                <form action="/badguy.cgi" method="POST"
                      enctype="multipart/form-data">
                        <input type="field" value="/etc/password" />
                        <input type="submit" value=" OK " />
                </form>
        </body>
        </html>

  

______________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
> 


-- 
briac
 << dynamic .sig on strike, we apologize for the inconvenience >>


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to