J! 3.4 Fabrik 3.3.1 - File Upload outside httpdocs

[vivoices]

Hi,
the File Upload element works fine in my application, but I want to upload files with a FileUpload element outside the web directory, because I need them to be hidden from any web access.

When trying to get outside the webdir with ../, I get an error: "Error: 20 - JPath::check Use of relative paths not permitted"

Any ideas?

Thanks,
Udo

 

[cheesegrits]

You can't. The upload element treats all it's paths as relative to the web root, and we (and the J! file/folder API's) very deliberately don't allow moving uploaded files outside of the web root, for security reasons.

Your best approach would be "security through obscurity" by obfuscating file names.

-- hugh