NetTalk Central
NetTalk Web Server => Web Server - Ask For Help => Topic started by: johncorry on May 27, 2013, 06:44:37 PM
-
I am using html files for the index page body. In one of these I would like to be able to have a file selection for downloading. If I set a link within an html to the url 'servedocument' and have the file described there (eg p_web.SetValue('name','Forums.Tps') ) it works fine. So I could have a series of servedocument pages each with a different file identified. But is there some way to send a value within the url call that can be used within a case structure or something to serve the different files?
Thanks again
John
-
Hi John,
yes.
A URL contains the "Identifier" part, but it can also include parameters. Parameters are of the form name=value, are & separated, and the first parameter is separated from the identifier by a ?. For example;
http://www.whatever.com/servedocument
is the identifier part. but if you had
http://www.whatever.com/servedocument?name=forums.tps
then
p_web.GetValue('name')
returns
'forums.tps'
here's another one;
http://www.whatever.com/servedocument?name=forums.tps&type=tps&login=fred&password=notverysecure
in the above you use p_web.GetValue to retrieve the various parameter values.
cheers
Bruce
-
Thanks again Bruce - that works nicely.
In order to make it more secure I am trying to limit which files and from which folder with the following code.
loc:allow = 0
IF p_web.GetValue('name') = 'Forums.Tps'|
OR p_web.GetValue('name') = 'ForumUsers.Tps'
loc:allow = 10
END
IF loc:allow = 10
loc:filename = clip(p_web.site.apppath)& 'web\ozfile\' & p_web.GetValue('name')
! you need to add code here to check that the name is valid, and is within the range
! of files you want to allow to be served. If this is not done then ANY file on the
! machine can be served using this procedure.
p_web.HeaderDetails.ContentDisposition = 'attachment; filename="'&p_web.GetValue('name')&'"'
END
-
good.