JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.
We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.
How to prevent Executable Files from being uploaded to InkFilePicker Field?Asked by Oscar77 on August 06, 2013 at 01:43 PM
I just tested my form... and successfully uploaded an EXE file from my computer (using the Filepicker button). I haven't actually clicked "submit" but the upload status showed 100% progress... successfully uploaded.
Obviously, I don't want people uploading EXE files. How do I assign file types accepted? Additionally, when the uploaded files arrive, they are just a link, so there is no way of knowing what you are clicking on.
Can you please advise me? Thanks.
I've tested the InkFilePicker, and I am able to upload executable files without warning messages/errors. Let me create a ticket about this concern. You should receive a notification via this thread for the updates.
Additionally, when the uploaded files arrive, they are just a link, so there is no way of knowing what you are clicking on.
-You should be able to see what is the file type if you will hover your mouse to the link. See screenshot:
Thanks for letting us know about it.
Additionally, you can go to InkFilePicker Website. Account Dashboard > Console Section. There you can see the File Type of the uploaded files:
Thanks for opening a ticket Re: Filepicker.
Re: being able to hover and see the filetype... You CANNOT on the PDF (at least this didn't work for me). I COULD in the email notification I received.
Unlike the standard "Upload" button under Forms.. Filepicker (within Jotform) doesn't let you manage filetypes and image validation.
BUT, with standard Upload button, I get the link/attachment right to my Inbox, and I know what it is.
All in all, I think it is asking too much of my customer to "be careful" and hover before clicking on a link from form, etc. (or log into 'submissions' and I don't see any benefit to Filepicker. It sounded great at first, to be able to integrate FB, etc. but at what risk?
Besides, I am bummed that the URL method of submitting an image (my original issue) doesn't deliver what it is supposed to.
We appreciate your sight on regards to the risks that the current filepicker integration might come with.
For your second issue about the broken URL method, it's been also escalated on this thread, so you should receive an update on that thread whenever the issue gets resolved
New response receivedMuch appreciated... keep up the good work
Hi oscar, with this new issue you encountered. I have added a new toolbar option for filepicker in the form builder named 'extensions'. Similar to normal "Uploads" you can now specify what extensions are allowed to your InkFilePicker upload. ( see image below )
**Just take note to all the users out there who will going to use this feature, read the NOTE! :)
Please confirm is having this new feature will work best in your end.