Web Wiz Forums - Uploading files into database

Print Page | Close Window

Uploading files into database

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=4162
Printed Date: 02 April 2026 at 5:07am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Uploading files into database

Posted By: ckwan
Subject: Uploading files into database
Date Posted: 09 July 2003 at 1:50pm

Is there a feature to upload files and store them into the MS SQL database of version 7.01? I am looking to protect uploaded files from unregistered users and not exposed as part of the website's directory.

If not, is there a MOD or an example on how to do this?

Thanks,
Calvin

Replies:

Posted By: sespark
Date Posted: 09 July 2003 at 6:09pm

To be honest, I think you're either really ambition or insane. There is an easier way to do this. You can use the built File up stuff and store the links to the uploaded files in the database, or you can use a data definition or an OLE Wizard. I know you can use OLE Wizard to store pictures in Access, but I have never really played around with it in Micrsoft SQL Server. You're probably going to have to use a binary read off of Request.Form and some other fancy manuveurs. Good luck! You'll need it.

Posted By: ckwan
Date Posted: 10 July 2003 at 6:27pm

ASP Fast Forum has this feature, but we are not interested in its UI.
http://www.aspfastforum.com/aspfastforum/ - http://www.aspfastforum.com/aspfastforum/

Stored file paths means pointing to files on the website which is not as secured as retrieving it from the database

Feature request to have this option added?

Calvin

Posted By: Bunce
Date Posted: 11 July 2003 at 5:08am

If you can gain access to a website then odds are you'll be able to access the database, be it SQL or Access, since the connection details will be generaly stored in your code.

You're better off storing it on the website and ensuring the those security settings are set correctly.

Cheers,
Andrew

-------------
There have been many, many posts made throughout the world...
This was one of them.

Posted By: WebWiz-Bruce
Date Posted: 11 July 2003 at 11:06am

The reasons for not storing files and images in the database is that it is very bad on performance and as the size of the database increases the whole forum will slow down.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: ckwan
Date Posted: 11 July 2003 at 11:23am

Thanks, where can I find more information on the best practices for securing files on a website?

The forum that we are looking to create is for private members only, so performance might not be such an issue. There will no open subscription to this forum. That is why we don't want uninvited eyes to crawl/browse the site and find the files.

What I am looking to do is display the name of the attachment in the posted message, and then when they want to download it, write it out of the database in a new window, like you would be doing at a shareware website. So this shouldn't be slowing down the forum since there are no files being downloaded?

If this feature will not be added in the future, I will have to solve it myself...

Thanks,
Calvin