Hmm..... I guess it is not possible. First, when a file want to upload, the input type should be FILE, not HIDDEN, not TEXT. Second, when input type is FILE, I found that this is unable to make preset value. Third, the sequency for the ftp is file uploaded first, give the name at last. Am I right ? =)
Have a nice day, Connie ----- Original Message ----- From: "Octavian Rasnita" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 27, 2002 12:27 AM Subject: Another strange idea > Hi all, > > I am just a beginner, not a hacker, but an idea came to my mind. > > If I make a script for uploading files, it will result a variable with a > path to that file that user choose. > When the visitor will submit the form, I can modify the path to point to > another file. Is it true? > > And she could upload another file without knowing this. > > Is this a security whole? > > Thank you. > Teddy, > My dear email address is [EMAIL PROTECTED] > > > > > _________________________________________________________ > > Do You Yahoo!? > > Get your free @yahoo.com address at http://mail.yahoo.com > > > > > -- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
