Re: [Tclhttpd-users] File Upload Domain

[Colin M. <co...@ch...>]

Shouldn't be necessary to mod upload.tcl.

Firstly, you can specify -unique 1 to the upload domain, and all file
names will have .[clock clicks] appended to them.

You can also specify -command cmd to the domain, and write a callback
proc to get control after upload completion, at which point you can
rename or denature them as you see fit.

You can also limit the max filesize, max number of files and total
filesize, so it's pretty cool.

Of course, if what you're worried about is the possibility of someone
uploading a .tml file, I would recommend that you don't put your upload
directory *anywhere* under a document root, thus nobody can ever execute
anything that's uploaded.  If you want to subsequently move the files
under a docroot, after inspection, use the -command callback for it.

Colin.

On Thu, 2004-09-16 at 15:22, Jeff Smith wrote:
> Hi all,
> 
> Is there a way of preventing certain file names or
> file extensions from being uploaded via the file
> upload domain? At the moment I am thinking of
> modifying upload.tcl. Am I on the right track or is
> there a better way?
> 
> Kind Regards
> 
> Jeff Smith
> 
> 
> 	
> 		
> __________________________________
> Do you Yahoo!?
> New and Improved Yahoo! Mail - 100MB free storage!
> http://promotions.yahoo.com/new_mail
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
> Project Admins to receive an Apple iPod Mini FREE for your judgement on
> who ports your project to Linux PPC the best. Sponsored by IBM.
> Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
> _______________________________________________
> TclHttpd-users mailing list
> Tcl...@li...
> https://lists.sourceforge.net/lists/listinfo/tclhttpd-users
-- 
Colin McCormack <co...@ch...>