Skip to main content

The statement filebox allows user in the MS file selection form to choose the option "all files" and select an arbitrary file, although the filebox option for file types is restricted only to certain file types. The request to Uniface development is that after file selection Uniface itself checks the selected file:

  • Is the file type correct? If not then $status is not 0 but e.g. 1 telling that file type is incorrect.
  • Is the file path correct? If not then $status is not 0 but e.g. 2 telling that file path does not correspond to given entry path.

Another possibility would be a new option /secure with the consequence that $status would be negative and $result is empty, if one of the mentioned checks above fails.

 



------------------------------
Ewald Wichmann
Akdb
------------------------------

The statement filebox allows user in the MS file selection form to choose the option "all files" and select an arbitrary file, although the filebox option for file types is restricted only to certain file types. The request to Uniface development is that after file selection Uniface itself checks the selected file:

  • Is the file type correct? If not then $status is not 0 but e.g. 1 telling that file type is incorrect.
  • Is the file path correct? If not then $status is not 0 but e.g. 2 telling that file path does not correspond to given entry path.

Another possibility would be a new option /secure with the consequence that $status would be negative and $result is empty, if one of the mentioned checks above fails.

 



------------------------------
Ewald Wichmann
Akdb
------------------------------

HI Ewald


What is the security gain if the ending is checked?
A TXT file can just as well be an executable.
Endings are sound and smoke.

Ingo

PS 
As a warning:
The default in windows is not to show extensions for known types.
This leads to people clicking on "README.TXT" even though the file is actually called "README.TXT.exe".



------------------------------
Ingo Stiller
Aareon Deutschland GmbH
------------------------------