Thanks Ray. The research I've done talks about how this is a problem with FireFox and Safari. Apparently IE works fine. The solution everyone suggests is to pass the session ID to the flash file and then append it to the URL. All the examples are using PHP though. So if my post URL is upload.cfm?cfid=1234 then how do I make CF use that session?

Here are some more blogs talking about the issue
http://www.visible-form.com...
http://robrosenbaum.com/fla...

I discussed about this here before, it works in IE, but Safari or Firefox wont store the session on the request, my work around was to disable security for that specific .cfm upload file (havent seen another solution yet)

My file was site was protected via CFLOGIN, so I did this on the onRequestStart

<!--- Upload with Safari or Firefox? BUG --->
<cfif CGI.SCRIPT_NAME CONTAINS "admin/galerias/fotos/upload.cfm">

Then I skip the validation.

@Asa: CF supports receiving session info via the url. If you make a link like so:

a href="foo.cfm?#session.urltoken#"

This will append everything CF needs. So if you pass the value to Flash, and Flash does a post to

foo.cfm?INSERT THE VAR HERE IN ACTION SCRIPT

Then it should work just fine. You don't have to make CF work with it - it should "just work".

@Raul: Wow, I got to say though - I think thats a bad idea. It would let anyone upload files.

I dont know how the security system works so I think I am wrong with this, but wont it be the same for the user to know the upload.cfm address with or without the session id? (in order to upload something with unrestricted access?)

Everyone can easily hit view source and see the var passed in to the swf via flashVars

You can call a CFC from within CFFile to retrieve session information, if I recall correctly.

Thanks Ray!

Passing #session.urltoken# to the flash file and then appending it to the upload URL works great!

@David: Huh? :P

Asa,

Im curious how you got that to work, its not working for me doing. Did you added the token to the upload method of actionscript or did you sent the token through the data property in the URLRequest class?

@The WebRat

I swear that's how I think i did it! I think. ;)

**all my advice comes without warranty and is given with only vague recollections of what once worked.

If the upload directory has its own Application.cfc...

Would it be possible to use the onRequestEnd method in the application CFC, to add a user's Session ID to the database table?

I envision doing a look-up of the last ID in the DB onRequestEnd.

Thoughts?

@ Raul

I passed the upload path to the SWF as a variable:

file.swf?path=#URLEncodedFormat('UploadImage.cfm?#session.urltoken#')#

you need the URLEncodedFormat around it because session.urltoken is actually 2 url variables.

I've been looking for several days at examples of using a flash file uploader. I was after single or multiple file uploads, a progress bar and the ability to add "vanilla" form fields. The most promising I found was the YUI uploader from those nice people at Yahoo http://developer.yahoo.com/...

I got it working fine submitting to a simple CF page

<cfif structkeyexists(form,"Filedata")>
<cffile action="UPLOAD" filefield="Filedata" destination="#expandpath(".")#" nameconflict="OVERWRITE">
</cfif>

<cfif structkeyexists(form,"var1") and structkeyexists(form,"var2")>
<cffile action = "append" file = "#expandpath(".")#\log.txt" output = "var1 = #var1# var2 = #var2#">
</cfif>

I'm a complete novice with Javascript, PHP, flash in fact anything other than CF, so there's a bit I don't understand (well several ... but this one in particular!)

On the example in the YUI documentation they say they are using this PHP scrip to handle server side

1 <?php
2 foreach ($_FILES as $fieldName => $file) {
3 move_uploaded_file($file['tmp_name'], "./" . $file['name']);
4 echo (" ");
5 } ?>

The echo bit seems to "bounce back" the post data which is then picked up by the onuploadresponse(event). In CF how would I pass back some response to the calling page to fire this event?

ANything you would output in the CF page would be sent back. If you did

Hi

by itself, then that would return. In CF you don't have to echo anything, any non-code will just output (unless you have cfsetting enablecfoutputonly turned on, or cfsilent). So you don't have to do anything special here in that regard.

I know this is an old post, but I recently discovered another issue with flash forms. If you are using a load balancer that utilizes a cookie for sticky sessions, you can't stick to the same server because the flash form doesn't send the cookie in the header. No way around this issue as far as I can see.