NetTalk Central

Author Topic: NTWS does not open a file if given absolute path  (Read 2816 times)

Johan van Zyl

  • Full Member
  • ***
  • Posts: 180
  • jvz
    • View Profile
    • Email
NTWS does not open a file if given absolute path
« on: June 23, 2011, 07:05:53 AM »
Hi all

App is here:
c:\Callcenter\callw.exe

file is here:
c:\callcenter\forms\doc1.pdf

In Browse
if Path is .\forms\doc1.pdf the it opens the file
if Path is c:\callcenter\forms\doc1.pdf then it does not. It says something about Page Not Found etc.

Solutions?

Thx everybody

JVZ
Johan van Zyl
Clarion 6.3 9058/C8 Gold/SQL/NetTalk WebServer

Bruce

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 11244
    • View Profile
Re: NTWS does not open a file if given absolute path
« Reply #1 on: June 23, 2011, 07:45:49 AM »
what is the web folder setting for the app?

It shouldn't be serving _anything_ that is not inside the web folder, unless you're doing a specific handling of the file using a technique like in example 40 (FileDownload). And even that should be done _very_ carefully - ideally using some random hash as a substitute for the file name.

putting a full path name in the URL is _definitely_ a bad idea. That means any user can fetch literally any file on your server. (including password files, data files and so on).

Cheers
Bruce