cocoon-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Johannes Becker" <jonnybec...@hotmail.com>
Subject Re: Uploading problem
Date Fri, 10 Oct 2003 11:18:05 GMT
Hi,

this is just for a project in school that will never go in commercial 
production.

Regards, Jonny


>From: Upayavira <uv@upaya.co.uk>
>Reply-To: users@cocoon.apache.org
>To: users@cocoon.apache.org
>Subject: Re: Uploading problem
>Date: Fri, 10 Oct 2003 11:54:35 +0100
>
>Johannes Becker wrote:
>
>>Hi,
>>
>>I'm using Cocoon 2.1 and tried out the upload example. But somehow the 
>>uploaded file doesn't appear in the upload directory.
>>
>>In the example it says:
>>
>>>>All files are cleaned out of the upload directory at the end of the 
>>>>request. The assumption is that other application logic will have acted 
>>>>on the files during the request.
>>>
>>
>>So what must I do to save the file permanently on disk? I want to upload a 
>>jdbc-driver in the WEB-INF/lib directory.
>
>Extremely dangerous. You're potentially giving people the capacity to 
>upload their own jars that could replace bits of Cocoon. If you want to 
>upload new JDBC jars, why can't you just use FTP or SCP? As I say, allowing 
>people to upload their own jars into WEB-INF lib would be a huge security 
>risk.
>
>Regards, Upayavira
>
>>
>>My web.xml entries:
>>...
>>
>>    <init-param>
>>      <param-name>enable-uploads</param-name>
>>      <param-value>true</param-value>
>>    </init-param>
>>
>>    <init-param>
>>      <param-name>upload-directory</param-name>
>>      <param-value>WEB-INF/lib</param-value>
>>    </init-param>
>>
>>    <init-param>
>>      <param-name>autosave-uploads</param-name>
>>      <param-value>true</param-value>
>>    </init-param>
>>
>>    <init-param>
>>      <param-name>overwrite-uploads</param-name>
>>      <param-value>rename</param-value>
>>    </init-param>
>>
>>    <init-param>
>>      <param-name>upload-max-size</param-name>
>>      <param-value>10000000</param-value>
>>    </init-param>
>>
>>
>>What am I doing wrong?
>>
>>Jonny
>>
>>_________________________________________________________________
>>E-Mails sind zu unpersönlich? Mit einer Webcam wird der MSN Messenger zum 
>>Bildtelefon! http://messenger.msn.de Jetzt kostenlos downloaden und der 
>>Spaß beginnt!
>>
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: users-unsubscribe@cocoon.apache.org
>>For additional commands, e-mail: users-help@cocoon.apache.org
>>
>>
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@cocoon.apache.org
>For additional commands, e-mail: users-help@cocoon.apache.org
>

_________________________________________________________________
MSN Groups & Chat - Freunde finden - leicht gemacht  
http://groups.msn.com/people/


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@cocoon.apache.org
For additional commands, e-mail: users-help@cocoon.apache.org


Mime
View raw message