What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.


  • Profile Image

    How to prevent Executable Files from being uploaded to InkFilePicker Field?

    Asked by Oscar77 on August 06, 2013 at 01:43 PM

    I just tested my form... and successfully uploaded an EXE file from my computer (using the Filepicker button). I haven't actually clicked "submit" but the upload status showed 100% progress... successfully uploaded.

    Obviously, I don't want people uploading EXE files. How do I assign file types accepted? Additionally, when the uploaded files arrive, they are just a link, so there is no way of knowing what you are clicking on.

    Can you please advise me? Thanks.

    Page URL:
    http://www.jotform.com//?formID=32175160654148

    Screenshot
    style size font uploaded files
  • Profile Image
    JotForm Support

    Answered by Welvin on August 06, 2013 at 03:44 PM

    Hi,

    I've tested the InkFilePicker, and I am able to upload executable files without warning messages/errors. Let me create a ticket about this concern. You should receive a notification via this thread for the updates.

    ----------

    Additionally, when the uploaded files arrive, they are just a link, so there is no way of knowing what you are clicking on.

    -You should be able to see what is the file type if you will hover your mouse to the link. See screenshot:

    Thanks for letting us know about it.

  • Profile Image
    JotForm Support

    Answered by Welvin on August 06, 2013 at 03:46 PM

    Additionally, you can go to InkFilePicker Website. Account Dashboard > Console Section. There you can see the File Type of the uploaded files:

    Thanks

  • Profile Image

    Answered by Oscar77 on August 06, 2013 at 04:23 PM

    Hi Welvin,

    Thanks for opening a ticket Re: Filepicker.

    Re: being able to hover and see the filetype... You CANNOT on the PDF (at least this didn't work for me). I COULD in the email notification I received.

    Unlike the standard "Upload" button under Forms.. Filepicker (within Jotform) doesn't let you manage filetypes and image validation.

    BUT, with standard Upload button, I get the link/attachment right to my Inbox, and I know what it is.

    All in all, I think it is asking too much of my customer to "be careful" and hover before clicking on a link from form, etc. (or log into 'submissions' and I don't see any benefit to Filepicker. It sounded great at first, to be able to integrate FB, etc. but at what risk?

    Besides, I am bummed that the URL method of submitting an image (my original issue) doesn't deliver what it is supposed to.

  • Profile Image

    Answered by jeanettebmz on August 06, 2013 at 06:24 PM

    We appreciate your sight on regards to the risks that the current filepicker integration might come with.

    For your second issue about the broken URL method, it's been also escalated on this thread, so you should receive an update on that thread whenever the issue gets resolved

  • Profile Image

    Answered by Oscar77 on August 06, 2013 at 07:47 PM
    New response receivedMuch appreciated... keep up the good work
  • Profile Image
    JotForm Support

    Answered by kenneth on August 09, 2013 at 04:14 PM

    Hi oscar, with this new issue you encountered. I have added a new toolbar option for filepicker in the form builder named 'extensions'. Similar to normal "Uploads" you can now specify what extensions are allowed to your InkFilePicker upload. ( see image below )

    **Just take note  to all the users out there who will going to use this feature, read the NOTE! :)

    Please confirm is having this new feature will work best in your end.

    Thanks,
    Kenneth