- Posts: 26
- Thank you received: 1
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
file upload question: where are the files stored?
- ricardo01
- Topic Author
- Offline
- Junior Member
Less
More
10 years 7 months ago #99955
by ricardo01
file upload question: where are the files stored? was created by ricardo01
I'm having problems downloading files uploaded using the Upload file question type. Where are these files stored? How can I download them?
The topic has been locked.
- DenisChenu
- Away
- LimeSurvey Community Team
Less
More
- Posts: 13643
- Thank you received: 2491
10 years 7 months ago #99969
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic file upload question: where are the files stored?
You can download them in "browse response" page.
Denis
Denis
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- ricardo01
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 26
- Thank you received: 1
10 years 7 months ago #99982
by ricardo01
Replied by ricardo01 on topic file upload question: where are the files stored?
Thanks Dennis,
I cannot download them from the browse response page because ALL files uploaded by 150+ people are corrupted.
So I'd like to check if the files are corrupted after downloading them or when uploading them.
To find 1 or 2 corrupted files wouldn't be anything out of the ordinary...but every single file is not a coincidence.
so, I'd like to know if there's a way to get to those files that is not through the browse/display response page
I cannot download them from the browse response page because ALL files uploaded by 150+ people are corrupted.
So I'd like to check if the files are corrupted after downloading them or when uploading them.
To find 1 or 2 corrupted files wouldn't be anything out of the ordinary...but every single file is not a coincidence.
so, I'd like to know if there's a way to get to those files that is not through the browse/display response page
The topic has been locked.
- DenisChenu
- Away
- LimeSurvey Community Team
Less
More
- Posts: 13643
- Thank you received: 2491
10 years 7 months ago #100001
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic file upload question: where are the files stored?
Hi,
In the database you have the new filename : something like this jgftftsqd5454hhgh .
And the file are in
./upload/survey/{SID}/files
Denis
In the database you have the new filename : something like this jgftftsqd5454hhgh .
And the file are in
./upload/survey/{SID}/files
Denis
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- DWS
- Offline
- New Member
Less
More
- Posts: 6
- Thank you received: 0
10 years 6 months ago #100276
by DWS
Replied by DWS on topic file upload question: where are the files stored?
but this is not very helpfull, because not only the filename is changed, also the extension, so I can't get directly from the directory, I have to get it from the responses view.
Also if I try to download it from the resources menu, I get the zip with this wrong file name and wrong file extension.
So, there's anyway to get the file directly from the directory?
thanks
regards
Also if I try to download it from the resources menu, I get the zip with this wrong file name and wrong file extension.
So, there's anyway to get the file directly from the directory?
thanks
regards
The topic has been locked.
- alexgarciac
- Offline
- New Member
Less
More
- Posts: 3
- Thank you received: 0
7 years 2 months ago #148084
by alexgarciac
Replied by alexgarciac on topic file upload question: where are the files stored?
hi, I am accessing the folder where uploaded images are stored in limesurvey. the problem is that all images and pdfs are stored as fu_zytptcq2zpbwtsd with no indication whatsoever about the type of file (pdf, jpg, etc). so once I download it into my pc, I can only find out the content of the file in my mac because preview is smart enough as to convert what ever it is and display it. but in windows I just cant find out how to determine the type of file I am dealing with, no extension, no indication as for the file type. how can I transform whatever limesurvey is doing to the uploaded files into something usable?
The topic has been locked.
- tpartner
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 10108
- Thank you received: 3593
7 years 2 months ago #148091
by tpartner
Cheers,
Tony Partner
Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.
Replied by tpartner on topic file upload question: where are the files stored?
The filenames are intentionally obfuscated. The simplest workaround would be to send yourself a basic or detailed notification email and click on the "view response" link. From there you can download the file.
Cheers,
Tony Partner
Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.
The topic has been locked.
- jelo
- Offline
- Platinum Member
Less
More
- Posts: 5033
- Thank you received: 1257
7 years 2 months ago #148093
by jelo
www.raymond.cc/blog/what-file-is-that-ho...es-types-and-format/
A obfuscation with filetypesuffix in cleartext wouldn't raise the risk of file exposure to third parties that much.
At least not for direct access via URL/path
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Replied by jelo on topic file upload question: where are the files stored?
To find out the type of files you might try some of these tools:alexgarciac wrote: I can only find out the content of the file in my mac because preview is smart enough as to convert what ever it is and display it. but in windows I just cant find out how to determine the type of file
www.raymond.cc/blog/what-file-is-that-ho...es-types-and-format/
A obfuscation with filetypesuffix in cleartext wouldn't raise the risk of file exposure to third parties that much.
At least not for direct access via URL/path
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The topic has been locked.
- DenisChenu
- Away
- LimeSurvey Community Team
Less
More
- Posts: 13643
- Thank you received: 2491
7 years 2 months ago #148111
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic file upload question: where are the files stored?
PS : this file upload question type must be really rewrited for
- Save file elsewhere on the disk (with a cleaner file name, but out of web access)
or
- Save file in DB
- Save file elsewhere on the disk (with a cleaner file name, but out of web access)
or
- Save file in DB
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- holch
- Away
- LimeSurvey Community Team
Less
More
- Posts: 11658
- Thank you received: 2742
7 years 2 months ago #148123
by holch
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
Replied by holch on topic file upload question: where are the files stored?
I also find it strange that it seems so complicated to get to these uploaded files. I mean, security of the files is important, but if it is so complicated (never used this question type, I only see the confusion on the forum), then this question type is basically useless for most users, because they don't know how to get to their files.
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
The topic has been locked.
- DenisChenu
- Away
- LimeSurvey Community Team
Less
More
- Posts: 13643
- Thank you received: 2491
7 years 2 months ago #148155
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic file upload question: where are the files stored?
@holch : currently : we are unsure user have access to a directory out of web. This system is used with very important thing sometimes ( CV/ Contract / id card etc ...) then we must NOT show it publicly.
Like i put in the report : i think there are only 2 ways to have a clean upload file system
- Save in DB only : it's more difficult to find it ...
- Save on the server out of web server : need configuration
If anyone are interested by a plugin : 'moveFileUploadToDir' when survey is submitted : i can make an offer.
Like i put in the report : i think there are only 2 ways to have a clean upload file system
- Save in DB only : it's more difficult to find it ...
- Save on the server out of web server : need configuration
If anyone are interested by a plugin : 'moveFileUploadToDir' when survey is submitted : i can make an offer.
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- jelo
- Offline
- Platinum Member
Less
More
- Posts: 5033
- Thank you received: 1257
7 years 2 months ago #148162
by jelo
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Replied by jelo on topic file upload question: where are the files stored?
The obfuscation is OK.
The issues around fileuploads storage are always:
1.) Preventing access via guessing a direct link to the file. E.g. when the pattern of the files is widely known.
2.) Prevent access when PHP is not working (correctly). E.g. php code will be displayed in the browser.
3.) Prevent access when Webserver is not working (correctly). E.g. htaccess no longer working.
4.) Make is easy to download file for survey admin.
For me the biggest issue with the current file upload question is the lacking of removing the files when deleting the survey and the database. The whole application gives the user the impression that the uploaded files are gone too.
The uploaded files stay on the server.
An option to config the upload path would be a good idea. That will allow people to move the storage location outside the webroot. Most people won't change it. But security gets improved. Same should be done with the databasebackup during the comfortupdate. These are also at risk of getting downloaded.
BTW: I always wonder why people use LimeSurvey for creating online-forms. Even the simplest address form looks strange with LS (E.g. too much space between the text inputs. No free positioning of fields.)
In public surveys the upload question is not that commonly used.
The issues around fileuploads storage are always:
1.) Preventing access via guessing a direct link to the file. E.g. when the pattern of the files is widely known.
2.) Prevent access when PHP is not working (correctly). E.g. php code will be displayed in the browser.
3.) Prevent access when Webserver is not working (correctly). E.g. htaccess no longer working.
4.) Make is easy to download file for survey admin.
For me the biggest issue with the current file upload question is the lacking of removing the files when deleting the survey and the database. The whole application gives the user the impression that the uploaded files are gone too.
The uploaded files stay on the server.
An option to config the upload path would be a good idea. That will allow people to move the storage location outside the webroot. Most people won't change it. But security gets improved. Same should be done with the databasebackup during the comfortupdate. These are also at risk of getting downloaded.
BTW: I always wonder why people use LimeSurvey for creating online-forms. Even the simplest address form looks strange with LS (E.g. too much space between the text inputs. No free positioning of fields.)
In public surveys the upload question is not that commonly used.
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The topic has been locked.