[Info-vax] HTTP and HTML File Upload Basics

[Simon Clubley]

On 2020-10-22, Phillip Helbig (undress to reply) <helbig at asclothestro.multivax.de> wrote:
>
> What I need now is a procedure to replace DCL_ENV_RM.COM which would 
> copy the file specified in WWW_FLD_DATAFILE to a directory (could be 
> hard-coded) on the machine where the server is running.  It would be 
> sufficient if it properly handles just normal text files (even just 
> 7-bit printable ASCII would be enough).
>
> Any ideas?
>
> Many web sites allow one to browse a list of files on a local disk 
> accessible to the web browser and upload one or more, so this isn't 
> something really bizarre.  My guess is that the OSU server would support 
> it.  The question is whether it can be done without having to install 
> PHP or whatever.  With regard to the scripting language, is there any 
> reason why DCL shouldn't work?
>

DCL will need access to the POST data, which is where you can find the
contents of the file.

Since I have never been insane enough to directly connect DCL to a
public facing URL, I have never done this so I don't know what
information is made available to the command procedure or how much
manual processing of the POST data you would need to do within DCL.

Just use PHP or another scripting language. On other operating systems,
these scripting languages have full support for this and present the file
data and other POST data in an easy to access format within your script.

If you continue with DCL, read this before continuing:

https://en.wikipedia.org/wiki/Code_injection#Shell_injection

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.