MACROMEDIA COLDFUSION MX 61-DEVELOPING COLDFUSION MX Develop Manual page 822

Reviewing the code
The following table describes the code and its function:
Code
<cffile action="upload"
destination="c:\temp\"
nameConflict="overwrite"
fileField="Form.FiletoUpload">
You uploaded
#cffile.ClientFileName#.#cffile.
ClientFileExt# successfully to
#cffile.ServerDirectory#.
Note: This example performs no error checking and does not incorporate any security measures.
Before deploying an application that performs file uploads, be sure to incorporate both error handling
and security. For more information, see
Chapter 14, "Handling Errors," on page
Resolving conflicting filenames
When you save a file to the server, there is a risk that a file with the same name might already
exist. To resolve this problem, assign one of these values to the
tag:
cffile
•
Error
(default) ColdFusion stops processing the page and returns an error. The file is not
saved.
•
Skip Allows custom behavior based on file properties. Neither saves the file nor returns an
error.
•
Overwrite
Overwrites a file that has the same name as the uploaded file.
•
MakeUnique
file object variables serverFile and serverFileName. You can use this variable to record the name
used when the file was saved. The unique name might not resemble the attempted name. For
more information on file upload status variables, see
on page 824.
Controlling the type of file uploaded
For some applications, you might want to restrict the type of file that is uploaded. For example,
you might not want to accept graphic files in a document library.
You use the
accept
qualifier is present, the uploaded file's MIME content type must match the criteria
accept
specified or an error occurs. The
names, optionally with wildcards.
A file's MIME type is determined by the browser. Common types, such as image/gif and text/
plain, are registered in the browser.
822 Chapter 37: Managing Files on the Server
Chapter 16, "Securing Applications," on page 345
285.
Generates a unique filename for the uploaded file. The name is stored in the
attribute to restrict the type of file that you allow in an upload. When an
accept
Description
Output the name and location of the uploaded file on
the client machine.
Specify the destination of the file.
If the file already exists, overwrite it.
Specify the name of the file to upload. Do not
enclose the variable in pound signs.
Inform the user of the file that was uploaded and its
destination. For information on
variables, see "Evaluating the results of a file upload"
on page 824.
nameConflict
"Evaluating the results of a file upload"
attribute takes a comma-separated list of MIME data
scope
cffile
and
attribute of the