Security :: File Upload With Different User?
Feb 15, 2010i use file upload to upload file a folder. but i need to give write permission to IUSR_MACHINENAME user. Can i achieve this with different user Account Credidental?
View 2 Repliesi use file upload to upload file a folder. but i need to give write permission to IUSR_MACHINENAME user. Can i achieve this with different user Account Credidental?
View 2 RepliesI am trying to create a new user that includes a file upload. I want to write the file name to the database in a table called MemberInfo.
Here is my button code:
[Code]....
I have a file upload control on my page with a regular expression validator that handles the file format.
Users can upload files but I want the maximum WIDTH size to be 500px.
If any bigger I need to show a message advising the width is to great and stops them.
I need to upload a file (xml, pdf, etc) from the user's PC, but I need to write it directly to a file server. I cannot use FileUpload because there is no way to direct its initial upload to anything but the web server. So, how do I use the HTML INPUT to upload the file from the user's PC directly to a file server located at a different URL than the web server the web page is being hosted on?
View 2 RepliesI am using the async file upload control to upload to a image file. I want the user to upload only jpg files. And for that I am checking the uploadedfile content type in server side, after the upload complets. I wanna check this, before upload starts. There is one javascript method
function startUpload(sender, args){}
but how to access the content type of the file selected by user.
Question:
I have a web interface where a user can upload an XML file, which then gets imported into a SQL database.
Import works fine, interface works fine, logfile works fine. The problem: The user doesn't get any progress report until the entire file has been processed... Is there any way the server can output logfile messages to the user page while processing? I mean AJAX doesn't work for server side calls to the client, only vice-versa, or is there a workaround ?
I am wondering what the best strategy is for accepeting http uploaded files on a web server in a safe way? I have access to scanning software which will quarantine suspect files, but not really sure what the best practice is for this kind of thing?This is somewhat of a pest as the form data and the uploaded file form a logical unit - the fact the files must be scanned (pottentially quarantined) means I would need some kind of callback, post upload mechanism for handling this.
Is there a preferred way (or peice of software) for handling thsi kind of thing?Happy to elaborate of anyone wants to comment or assist? I'm aware I can limit file size, file extension etc, so really just concerned about stopping viruses entering the web server and/or network. And I guess to do so in awy that allows me to interact with scanning software such that I get feedback in relatively real time??
I want to limit the allowed uploaded file types to images, pdfs, and docs. What is the recommended way to approach this?
I assume checking the file extension alone is not enough, since an attacked can change the file extension as he wishes.
This is basically for a course management system for students to upload assignments and teachers to download and view them.
I'm doing a project in component management system. I need to block executable files from getting uploaded. Blocking should not be based on the extensions. For example, i've a file named abc.exe i'm going to change the file extension to abc.jpg in this case that abc file should not get updated. Similar to that in gmail file attachment.
View 2 RepliesI'm doing a project in component management system. I need to block executable files from getting uploaded. Blocking should not be based on the extensions. For example, i've a file named abc.exe i'm going to change the file extension to abc.jpg in this case that abc file should not get updated. Similar to that in gmail file attachment.
View 1 RepliesI am using FileUpload control to facilitate Image file upload on my website. I want to restrict a user to upload only Image file. I am using
if (fupFirmLogo.PostedFile.ContentType == "image/Jpeg")
{
}
to check if the file is a image or not. I want to allow all image extensions like PNG, GiF, Jpeg, tif , BMP etc. How should I do it.
I made a website for a friend and he uploads a lot of pictures, around 20k per month. And sadly, I made it so he has to upload 1 at a time, because when they are uploaded they are renamed, attached to a group id and watermarked. Is there a way to allow him to select all 20 in a group and have them be uploaded and processed? I've looked into a couple of way to do it, mostly flash, and that will not work since we are renaming and added the newly created name to the db. Adding addition upload controls is not a solution. If we need to make a desktop application that does the uploading, that is alright as well, but we'd like to keep it all in the asp.net environment.
View 1 RepliesI've an application built on asp.net 2.0. There is an option for user to upload excel file. Once the file has been uploaded the data in the file is validated against some business rules. Rows that successfully validates are inserted into database as soon as it is validated.
I use ado.net to connect to excel file. And use data reader to iterate over all the records. Normally the number of records range from 5,000 to 20,000. This process takes good 8 to 10 minutes. I want to optimize this process because to my understanding it takes too long. Currently I am looking at OPENROWSET, OpenDataSource which so far is unsuccessful. Valiation that takes place on every row is very simple. I only checks for maximum length. So validation itself is not an issue.
I want to limit the allowed uploaded file types to images, pdfs, and docs. What is the recommended way to approach this?I assume checking the file extension alone is not enough, since an attacked can change the file extension as he wishes.I also thought about checking against MIME Type using PostedFile.ContentType.I still don't know if this is adding any further functionality than checking against file extensions alone, and if an attacker have and ability to change this information easily.This is basically for a course management system for students to upload assignments and teachers to download and view them.
View 2 RepliesIam using a file upload control for uploading files in my asp.net application. iam using the following code to impersonate the users who do not have permission for the files to upload. The code works fine for all the files, but it is not working for the files which are in desktop.
Code in .cs file:
System.Security.Principal.WindowsImpersonationContext impersonationContext;
impersonationContext =
((System.Security.Principal.WindowsIdentity)User.Identity).Impersonate();
//Insert your code that runs under the security context of the authenticating user here.
impersonationContext.Undo();
In web.config iam using the following:
<identity impersonate="true" />
how can I know that the user already selected a file in the upload control, basically I need something like an event when the uploadfile control already have the filename, since I want to upload inmediately without having a second button that the user would need to click so the program can do the SavAs, I want to do it automatially after the user selected the file with the upload control.
View 1 RepliesMy application allows a user to upload a file using the FileUpload control. The data contained in the uploaded file is then displayed to the user in a Grid for review if certain field validation criteria is met otherwise, a message is displayed stating that invalid data was encountered. If the data displayed is satisfactory, they have a 'Process Data' button to add the data to the system.
Initially, I used a simple If/Else block to determine if there was a file selected or not and if not, display a message to the user. As the coding got more complicated, this stopped working and I was told to use the RequiredFieldValidator control instead to get around the issues that arose.Now, I have a new issue: after the uploaded file data passes field criteria validation, the FileUpload box is cleared automatically and so when the user clicks the 'Process Data' button, the VC throws a message stating that the file name is missing from the FileUpload box.
I have to create a utility through which user can able to upload singh or multiple files with the use of asp.net FileUpload Server control.
I am looking for Security concern for the same. What are the points need to keep in our minds which violate security. One main issue is in my mind is related to Viruses - means
How to prompt user for viruses and terminate the upload operation How to scan files for viruses during upload operation There may be several Security risks. discuss the issues/risks with proposed solutions.
I have a file upload control in which i want to restricr the users not to upload more than 1mb file. Is it possible using custom validator or any other code. I want to raise validation before any postback happends.
View 2 RepliesI have a gridview that allows the user to export this gridview to excel. Here is my codes but I would like my user to be able to select where to download the file
Protected Sub ExportToExcel(ByVal sender As Object, ByVal e As System.EventArgs) Handles btnExport.Click
lblMsg.Visible = True
Try
Dim objSw As New StreamWriter(txtFileName.Text.Trim + ".xls")
'Dim serverFilePath As String = "D:Excel Files"
'Dim fileStream As New FileStream(serverFilePath, FileMode.Open)
'Dim fileSize As Long = fileStream.Length
'Response.ContentType = "application/octet-stream"
'Response.AddHeader("Content-Disposition", "attachment; filename=""" & txtFileName.Text.Trim & """;")
'Dim fileBuffer As Byte() = New Byte(fileSize - 1) {}
'fileStream.Read(fileBuffer, 0, CInt(fileSize))
'Response.BinaryWrite(fileBuffer)
'fileStream.Close()
'Response.[End]()
Dim objDt As DataTable = DirectCast(Session("Data"), DataTable).Copy()
'Get No Of Column in GridView
Dim NoOfColumn As Integer = objDt.Columns.Count...........................
I want to get full path which user selected in file upload control.
how can we do it.
i saw a post you wrote a few years ago, and you were saying how to do this task, but it was required te change the encription type. Since i'm in a user Control (and inside a Master Page), i've been trying several solutions in the web, but none of them has been satisfactory.
View 1 Replieshow to upload and save files to oracle database, and view file using C# .net and can upload one or more files in one webform.
View 1 RepliesI want to upload files to the web servers from the client machines.
Can i upload a file on a network share folder using file upload control?
I would like to create a share folder on a file server sitting next to the web server. If i upload the file from the network share folder instead of uploading it from the client machine does it make any difference?
Will the file be stored in a temporary location before copying to the final destination? Where will be the file stored in this case of uploading it from share folder?
Im with ASP.net using VB.net. What was supposed to happen is that upon page load, the system will automatically create a folder in C:. After that, the user will browse a text file and upload it to the created folder. But what happens is that both the folder and the text file is being uploaded inside C: where it should be the folder only and then the text file should be inside the folder.Here's my code.
Code:
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
Directory.CreateDirectory("C:TEXTFILEFOLDER")
End Sub
Private Sub DeleteFile(ByVal strFileName As String)
[code]....