使用JSP中的HTML type = file进行文件上传,并在上传之前在javascript中执行一些检查...

时间:2012-04-12 08:49:30

标签: javascript html jsp

目前我们有此代码上传文件

<input id='fileBrowse' type='file' style="width:187px;height:20px" class='fileBrowse' onchange="onBrowseFile( this );" />

和进行一些检查的javascript函数如下:

    function onBrowseFile( fb ) {
    var myFSO = new ActiveXObject("Scripting.FileSystemObject");
    var thefile = myFSO.getFile(fb.value);
    if( (thefile.size / 1000000) > maxfilesize) {
        alert( "The size of the files you have tried to drag and drop exceed the maximum allowed. Please drag no more than "+maxfilesize+" MB at a time." );
        return;
    }
    if( fb.value.indexOf( ".exe" ) > -1 ||
            fb.value.indexOf( ".asp" ) > -1 ||
            fb.value.indexOf( ".aspx" ) > -1 ||
            fb.value.indexOf( ".cab" ) > -1 ||
            fb.value.indexOf( ".com" ) > -1 ||
            fb.value.indexOf( ".dll" ) > -1 ||
            fb.value.indexOf( ".java" ) > -1) {
        alert( "The import of one or more files type are not permitted" );
        return;
    }
    document.getElementById( "txtFilePath" ).value = fb.value;
}

现在问题是我们现在使用IE9和IE9安全性不允许我们在不修改安全设置或注册表的情况下使用ActivexControl。我们不能这样做,因为我们有5000个这个应用程序的用户。

请建议我们还可以用什么来解决这个问题。我们必须进行这些检查......

2 个答案:

答案 0 :(得分:0)

您可以运行检查服务器端。

答案 1 :(得分:0)

将IE 5用于IE9。

var upload = document.getElementById('fileBrowse');

upload.onchange = function (e) {
  e.preventDefault();
  var file = upload.files[0];
  if( ( file.fileSize) > (2 * 1024*1024) ) {
        alert( "The size of the files you have tried to drag and drop exceed the maximum allowed. Please drag no more than 1 MB at a time." );
        return;
  }
  if( file.name.indexOf( ".exe" ) > -1 ||
        file.name.indexOf( ".asp" ) > -1 ||
        file.name.indexOf( ".aspx" ) > -1 ||
        file.name.indexOf( ".cab" ) > -1 ||
        file.name.indexOf( ".com" ) > -1 ||
        file.name.indexOf( ".dll" ) > -1 ||
        file.name.indexOf( ".java" ) > -1 ) {
        alert( "The import of one or more files type are not permitted" );
        return;
  }
  return false;
};