How to prevent Executable Files from being uploaded to InkFilePicker Field?

  • Profile Image
    Oscar77
    Asked on August 06, 2013 at 01:43 PM

    I just tested my form... and successfully uploaded an EXE file from my computer (using the Filepicker button). I haven't actually clicked "submit" but the upload status showed 100% progress... successfully uploaded.

    Obviously, I don't want people uploading EXE files. How do I assign file types accepted? Additionally, when the uploaded files arrive, they are just a link, so there is no way of knowing what you are clicking on.

    Can you please advise me? Thanks.

  • Profile Image
    Welvin
    Answered on August 06, 2013 at 03:44 PM

    Hi,

    I've tested the InkFilePicker, and I am able to upload executable files without warning messages/errors. Let me create a ticket about this concern. You should receive a notification via this thread for the updates.

    ----------

    Additionally, when the uploaded files arrive, they are just a link, so there is no way of knowing what you are clicking on.

    -You should be able to see what is the file type if you will hover your mouse to the link. See screenshot:

    Thanks for letting us know about it.

  • Profile Image
    Welvin
    Answered on August 06, 2013 at 03:46 PM

    Additionally, you can go to InkFilePicker Website. Account Dashboard > Console Section. There you can see the File Type of the uploaded files:

    Thanks

  • Profile Image
    Oscar77
    Answered on August 06, 2013 at 04:23 PM

    Hi Welvin,

    Thanks for opening a ticket Re: Filepicker.

    Re: being able to hover and see the filetype... You CANNOT on the PDF (at least this didn't work for me). I COULD in the email notification I received.

    Unlike the standard "Upload" button under Forms.. Filepicker (within Jotform) doesn't let you manage filetypes and image validation.

    BUT, with standard Upload button, I get the link/attachment right to my Inbox, and I know what it is.

    All in all, I think it is asking too much of my customer to "be careful" and hover before clicking on a link from form, etc. (or log into 'submissions' and I don't see any benefit to Filepicker. It sounded great at first, to be able to integrate FB, etc. but at what risk?

    Besides, I am bummed that the URL method of submitting an image (my original issue) doesn't deliver what it is supposed to.

  • Profile Image
    jeanettebmz
    Answered on August 06, 2013 at 06:24 PM

    We appreciate your sight on regards to the risks that the current filepicker integration might come with.

    For your second issue about the broken URL method, it's been also escalated on this thread, so you should receive an update on that thread whenever the issue gets resolved

  • Profile Image
    Oscar77
    Answered on August 06, 2013 at 07:47 PM
    New response receivedMuch appreciated... keep up the good work
  • Profile Image
    kenneth
    Answered on August 09, 2013 at 04:14 PM

    Hi oscar, with this new issue you encountered. I have added a new toolbar option for filepicker in the form builder named 'extensions'. Similar to normal "Uploads" you can now specify what extensions are allowed to your InkFilePicker upload. ( see image below )

    **Just take note  to all the users out there who will going to use this feature, read the NOTE! :)

    Please confirm is having this new feature will work best in your end.

    Thanks,
    Kenneth