FileUpload control question

11 Oct 2007 5:28 PM

JoeP

Hi All,

I am using the FileUpload control for the ASPX page. How do you disable the
text box portion of that control, so I can force the user only to pick up a
file via the Browser button, and not to type any file name that does not
exists.

Appreciate any feedback or any other suggestions.

Thanks,

Joe

11 Oct 2007 9:35 PM

Steve C. Orr [MCSD, MVP, CSM, ASP Insider]

No, can't be done with the standard FileUpload control. The FileUpload
control is very sensitive from a security standpoint, and for that reason it
is not very configurable. Less features means less attack vectors.

--
I hope this helps,
Steve C. Orr,
MCSD, MVP, CSM, ASPInsider
http://SteveOrr.net

Show quote

"JoeP" <J***@hotmail.com> wrote in message
news:ODutowCDIHA.3712@TK2MSFTNGP02.phx.gbl...
> Hi All,
>
> I am using the FileUpload control for the ASPX page. How do you disable
> the
> text box portion of that control, so I can force the user only to pick up
> a
> file via the Browser button, and not to type any file name that does not
> exists.
>
> Appreciate any feedback or any other suggestions.
>
> Thanks,
>
> Joe
>
>

12 Oct 2007 9:38 AM

Phil H

> No, can't be done with the standard FileUpload control. The FileUpload
> control is very sensitive from a security standpoint, and for that reason it
> is not very configurable. Less features means less attack vectors.

Could also be that Browse button only functionality is not an obvious
requirement and to implement it requires a considerable extension to
the Javascript (it requires more complex client-side behaviour).

In any case, once the user hits the browse button what is there to
stop them typing in the filename box within the windows open file
dialog?