Flash Upload changes in Flash Player 10

This has been covered on other sites even when FP10 was still beta, but sadly I've just ran into this one right now.

Flash Player 10 no longer allows uploads to be invoked from within javascript, and requires an actual mouseclick or buttonpress event from within flash. For the people using tools like swfupload or the (old version of-) YUI uploader, this is bad news, as these tools will simply break.

The fix was made as a security measure against phishing-type attacks, and this has been the behaviour in browsers for as long as I can remember, so if its any consolidation.. it's a good thing really.

The Flash Blog mentions:

Similarly, another possibility is to overlay a transparent SWF button over the HTML content so that again, the user clicking happens in Flash and not in HTML.

Which is actually kind of funny, in a time where 'Clickjacking' is big news, and I would also strongly discourage such attempts to make sure you have a solution that still works in 2009. I'd like to see an example of this, just to test if noscript's clickjacking protection works.

The only real options out there are to simply switch back to good old html uploaders, or do your uploader interface entirely in flash. We'll probably be implementing the former in the short term to work on the latter down the road. The updated version of the YUI uploader also takes the flash approach.


3 Responses to Flash Upload changes in Flash Player 10

  1. 743 Martin Fjordvald 2008-10-17 12:16 pm

    Personally I'm a sucker for FancyUpload which builds on mootools.

    There was an update in the authors github about flash 10 a day ago so I assume it's been fixed there already.

  2. 742 Tore B. Krudtaa 2008-10-18 9:24 am

    Some work has been done lately to enable usage of the UPLOAD HOOKS in PHP by using only session variables.

    Take a look here:

    http://wiki.php.net/rfc/session_upload_progress

    This can be tested in latest builds of PHP 6 version which can be found here for Linux:
    http://snaps.php.net/

    And here for windows:
    http://windows.php.net/snapshots/

  3. 744 Travis N. 2009-03-09 4:45 am

    Check out uploadify. It's a jQuery and Flash multiple file uploader

    http://www.ronniesan.com/articles/jquery-multiple-file-upload.php



About

My name is Evert, and I've been writing semi-regularly on this blog since 2006.

I'm currently available for contract work.

more info.

Subscribe

Dropbox

Dropbox is a simple cross-platform online backup and sync application. The first 2GB of space is free, and both you and me get an extra 250MB extra space if you sign up through this link.