Rank: Member
Groups: Member
Joined: 10/30/2003(UTC)
Posts: 12
|
SellectAll() and DeSelectAll() don't appear to be working properly when using custom buttons and setting CheckFilesBySelectAllButton to 'true'. It acts as if CheckFilesBySelectAllButton is set to 'false'. If I use the built in buttons with ShowButtons='True' , it works properly. Is this a bug or am I doing something wrong?
|
|
|
|
|
|
Rank: Advanced Member
Groups: Member, Administration, Moderator
Joined: 7/28/2003(UTC)
Posts: 1,659
Thanks: 5 times
Was thanked: 76 time(s) in 74 post(s)
|
It isn't bug. It is behaviour by design. Here is quote from What's New topic: Added CheckFilesBySelectAllButton property which changes the behaviour of the Select All button. If you set it to True, files will be checked (or put to upload list) unlike default behaviour when they are just selected . However SelectAll method still just selects files regardless to the value of this property (due security reason). And here is documentation for SelectAll method: Note, this method does not checks all files (or add them to upload list). User must check files (or drag them to upload list) manually. This behavior was defined deliberately due security reasons. It prevents possibility to steal files from last visited folder without user's knowledge (by calling SelectAll and Send methods). Although behaviour of the Select All button can be changed to check files immediately (using CheckFilesBySelectAllButton property), this method always only selects the files. |
Best regards, Fedor Skvortsov |
|
|
|
|
|
Rank: Member
Groups: Member
Joined: 10/30/2003(UTC)
Posts: 12
|
It's by design for the custom buttons to work differently than the built in buttons???
|
|
|
|
|
|
Rank: Advanced Member
Groups: Member, Administration, Moderator
Joined: 7/28/2003(UTC)
Posts: 1,659
Thanks: 5 times
Was thanked: 76 time(s) in 74 post(s)
|
It's by design for the custom buttons to work differently than the built in buttons???Yes, exactly, because user can click on built-in buttons only explicity, but as for SelectAll method, it can be called via scripting. It is definetly unsecure, because malicious website or even your own site after cross-site scripting injection could call SelectAll method, then call Send method, and so way upload all files from current folder on server without user agreement. I understand that it looks messy, but it is better to be messy, then unsecure. |
Best regards, Fedor Skvortsov |
|
|
|
|
|
Rank: Member
Groups: Member
Joined: 5/12/2004(UTC)
Posts: 49
|
I'm trying to make work the "Select All" button with the new feature: <param name="CheckFilesBySelectAllButton" value=True"> But the button works the same way! I mean it does not checked the files. Can you please tell me what I am doign wrong? Thanks ======================================================== 02/14/2008, Fedor This topic is out of date. You should use iuembed.js syntax now:
Code:iu.addParam("CheckFilesBySelectAllButton", "true")
======================================================== Edited by user Tuesday, October 28, 2008 7:24:07 AM(UTC)
| Reason: Not specified
|
|
|
|
|
|
Rank: Advanced Member
Groups: Member, Administration
Joined: 8/2/2003(UTC)
Posts: 876
Thanks: 2 times
Was thanked: 27 time(s) in 27 post(s)
|
Could you submit case with a link to the location where you use Image Uploader? Edited by user Friday, May 23, 2008 4:04:57 PM(UTC)
| Reason: Not specified
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.