Welcome Guest! You need to login or register to make posts.

Notification

Icon
Error

Options
Go to last post Go to first unread
portraitmaker  
#1 Posted : Wednesday, April 28, 2004 4:44:00 AM(UTC)
portraitmaker

Rank: Member

Groups: Member
Joined: 10/30/2003(UTC)
Posts: 12


SellectAll() and DeSelectAll() don't appear to be working properly when using custom buttons and setting CheckFilesBySelectAllButton to 'true'. It acts as if CheckFilesBySelectAllButton is set to 'false'.

If I use the built in buttons with ShowButtons='True' , it works properly.

Is this a bug or am I doing something wrong?




Fedor  
#2 Posted : Wednesday, April 28, 2004 7:08:00 AM(UTC)
Fedor

Rank: Advanced Member

Groups: Member, Administration, Moderator
Joined: 7/28/2003(UTC)
Posts: 1,538

Thanks: 4 times
Was thanked: 56 time(s) in 55 post(s)
It isn't bug. It is behaviour by design.

Here is quote from What's New topic:

Added CheckFilesBySelectAllButton property which changes the behaviour of the Select All button. If you set it to True, files will be checked (or put to upload list) unlike default behaviour when they are just selected . However SelectAll method still just selects files regardless to the value of this property (due security reason).

And here is documentation for SelectAll method:

Note, this method does not checks all files (or add them to upload list). User must check files (or drag them to upload list) manually. This behavior was defined deliberately due security reasons. It prevents possibility to steal files from last visited folder without user's knowledge (by calling SelectAll and Send methods). Although behaviour of the Select All button can be changed to check files immediately (using CheckFilesBySelectAllButton property), this method always only selects the files.
Best regards,
Fedor Skvortsov
portraitmaker  
#3 Posted : Wednesday, April 28, 2004 9:08:00 AM(UTC)
portraitmaker

Rank: Member

Groups: Member
Joined: 10/30/2003(UTC)
Posts: 12

It's by design for the custom buttons to work differently than the built in buttons???
Fedor  
#4 Posted : Wednesday, April 28, 2004 10:29:00 AM(UTC)
Fedor

Rank: Advanced Member

Groups: Member, Administration, Moderator
Joined: 7/28/2003(UTC)
Posts: 1,538

Thanks: 4 times
Was thanked: 56 time(s) in 55 post(s)
It's by design for the custom buttons to work differently than the built in buttons???

Yes, exactly, because user can click on built-in buttons only explicity, but as for SelectAll method, it can be called via scripting. It is definetly unsecure, because malicious website or even your own site after cross-site scripting injection could call SelectAll method, then call Send method, and so way upload all files from current folder on server without user agreement.

I understand that it looks messy, but it is better to be messy, then unsecure.
Best regards,
Fedor Skvortsov
praxisinc  
#5 Posted : Wednesday, May 12, 2004 9:42:00 AM(UTC)
praxisinc

Rank: Member

Groups: Member
Joined: 5/12/2004(UTC)
Posts: 49

I'm trying to make work the "Select All" button with the new feature:

<param name="CheckFilesBySelectAllButton" value=True">

But the button works the same way! I mean it does not checked the files.

Can you please tell me what I am doign wrong?

Thanks

========================================================
02/14/2008, Fedor
This topic is out of date.

You should use iuembed.js syntax now:


Code:
iu.addParam("CheckFilesBySelectAllButton", "true")

========================================================

Edited by user Tuesday, October 28, 2008 7:24:07 AM(UTC)  | Reason: Not specified

Andrew  
#6 Posted : Thursday, May 13, 2004 12:27:00 PM(UTC)
Andrew

Rank: Advanced Member

Groups: Member, Administration
Joined: 8/2/2003(UTC)
Posts: 866

Thanks: 2 times
Was thanked: 26 time(s) in 26 post(s)
Could you submit case with a link to the location where you use Image Uploader?

Edited by user Friday, May 23, 2008 4:04:57 PM(UTC)  | Reason: Not specified

Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.