List files located on the local machine?

[sharapov]

Is it possible to list dirrectories and files located on the client;s machine? In other words I want for my users to see a list of files located for example on their machine in the dirrectory C:\Windows\Temp\

Is it possible? If yes how can it be done

[Weedpacket]

Why: can't they find their own way around their own machine?

[url=file:///c:/windows/temp]This[/url] would work if security restrictions allowed it.

[tha_mink]

Some people don't have c:\windows\temp but rather /tmp or /var/tmp or something else even.

😉

[spaddict]

Here's what I use:

##########################################
# Returns list of images
##########################################

function GetFileList($dirname) {   

   $files = array(); 

$dir = opendir( $dirname );
while( $file = readdir( $dir ) ) 
{
	if (eregi("\.jpe?g$", $file) || eregi("\.gif$", $file) ||  eregi("\.png$", $file)) 
	{
    	$files[] = $file; 
    }
 }
 rsort($files);


   return $files; 
} 

To call it, just do:

 $imagelist = GetFileList($path);

And to cycle through the results:

foreach($imagelist as $image)
{
    // do stuff
}

[spaddict]

Okay, duh, I just read you said on the client machines and not the server. So, nevermind.

[spaddict]

Okay, last post -

I've seen some security companies try to spoof hacking into someone's computer by using an iframe. I can't remember the exact code, but they just use an iframe with the file:///c:/path as the source. But if they sit behind a server, the server's local hd will show up and not the client computer.

[bobthedog]

Ok -

Lets clear this up... PHP is server side script, and not run on client side. Because of security restrictions I doubt that you will ever be able to access users files without some sort of trusted plugin being installed on the users machine (which of course must have their permission to be installed).

Even if you can show the users files on their machine in the browser (using iframes etc), I don't think it would be possible to get any of this information back to the server. This would be a masisve hole in browsers security.