#swfupload

[jaclerigo-blog]

New Post has been published on João Clérigo - Photography

New Post has been published on http://fotografia.clerigo.net/2016/07/01/swfupload-and-the-pesky-error-401/

SWFupload and the pesky ERROR 401

Today I came across with some problems with an old installation of SWFupload and a htpasswd & htaccess protected website. When protected the SWFupload will not complete and returns the error: ‘Upload Error: 401’.

The solution is to edit your .htaccess file and add:

<Files "upload.php"> Satisfy Any </Files>

Any questions or comments? Post them below!

[kazu69]

[noteit-boblu]

using swfupload and rails session investigation

最近由于需要使用middleware来实现swfupload在rails中的应用，在看middleware的源码的时候，发现自己对session在rails中的生成过程十分的不明白，于是作了一番调查。

在Controller和View中调用的session变量的类

session.class #=> ActionController::Session::AbstractStore::SessionHash

session的获取

此变量是在ActionController::Base中定义的attr_internal :session

这个attr_internal方法实际上是用来声明对于@_session的读写, @_session是在assign_shortcuts方法中用request变量进行初始设置的

request的类是ActionController::Request，其中的request.session是通过@env['rack.session']设置的，而@env是通过Rack::Request中的initialize(env)设置的。

最后在rails/vendor/rack-1.0/session文件夹下的文件中，可以看到env['rack.session']是由从客户端传递过来的cookie进行设置的。

因此，也就是说，在上述的middleware中，只要在flash的回调中把客户端的cookie信息传递到rails，就可以像从一般的browser返回的一样调用session

参考

Rails で SWFUpload を使う

Rails2.1でSWFUploadを使うのまとめ

Uploading Files With SWFUpload

SWFUpload, Paperclip and Ruby on Rails

swfupload-rails-authentication

Flash uploaders, Rails, cookie based sessions and CSRF: Rack Middleware to the rescue!

[halhide]

[chirpysnail]

Multi File Uploader...

grrr, Im currently sitting on implementing SWFUpload into one of our sites. Very frustrating how much security and checks are needed.

Never trust your users :( Poor poor world.