Empty file upload field causing 403 error

I am about at my wits end with this. I have a weird scenario in that I have a simple form that allow for uploading a logo and adding a couple of fields of copy. When I choose a file and submit the form, everything works fine, the logo is uploaded and the form fields are added to my database. The problem arises when I try to just update the text fields and do not upload a logo. When I submit the form the server is giving me a 403 error. I get this error on both apache and IIS, both Mac and PC. It doesn't If I remove the file field, the form works fine. If I leave the file field in place, but remove the multi-part form designation, the form work fine. If I submit the form with a new file, the form works fine, it is just when I try to submit the form without attaching a file. Any suggestions?

I seem to remember a bug whereby the file upload field needs to be in a specific position, i.e. the first field on the form (or perhaps the opposite), otherwise you get issues like this. so give that a try and see if it helps. On Thu, Aug 2, 2012 at 3:32 PM, Dean Lawrence <deanlaw@gmail.com> wrote: ----- Excess quoted text cut - see Original Post for more -----

Thanks Russ, but unfortunately, that did not change anything. On Thu, Aug 2, 2012 at 10:36 AM, Russ Michaels <russ@michaels.me.uk> wrote: ----- Excess quoted text cut - see Original Post for more -----

Can you share your processing code? On Thu, Aug 2, 2012 at 9:47 AM, Dean Lawrence <deanlaw@gmail.com> wrote: ----- Excess quoted text cut - see Original Post for more -----

I could Ray, but I don't think that that will help, as the server is throwing the error before it reaches my processing page. I tested this by changing the form action to a non-processing page and received the same 403 error. On Thu, Aug 2, 2012 at 11:20 AM, Raymond Camden <raymondcamden@gmail.com> wrote: > > Can you share your processing code? > -- --------------------------------------------------------------------------- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development

Just a few questions on your form? How are you calling the data for the form to update an existing logo? Are you pulling the location of the image from db, or is it just a blank field? If the image location is calling from the db- are you set up to check for file existence before processing? /Scott On 8/2/12 8:26 AM, "Dean Lawrence" <deanlaw@gmail.com> wrote: ----- Excess quoted text cut - see Original Post for more -----

do you have any stray characters perhaps being inserted inserted into the file field, I have seen this happen on the MAC, that forms got submitted with things like hard spaces which caused issues. On Thu, Aug 2, 2012 at 4:34 PM, Scott Slone <sslone@rubbergumball.net>wrote: ----- Excess quoted text cut - see Original Post for more -----

Ok, I found out what the issue is. For this particular site, I am running FuseGuard and it is blocking the request. Apparently, the form is passing a ** extension when there is no file specified and the base rules for FuseGuard do not allow this. I am now going to dig into the rules to see how I can fix the issue. Thanks for the suggestions guys. On Thu, Aug 2, 2012 at 12:20 PM, Russ Michaels <russ@michaels.me.uk> wrote: ----- Excess quoted text cut - see Original Post for more -----

Turns out that Foundeo was aware of the issue and had released a newer version of FuseGuard which fixed it. Everything is working properly now. Yea!! On Thu, Aug 2, 2012 at 1:20 PM, Dean Lawrence <deanlaw@gmail.com> wrote: ----- Excess quoted text cut - see Original Post for more -----

Wrap the CFFILE (and related code) in a cftry.  You can also wrap the code in a CFIF and say basically <cfif form.file is not ""> Robert Harrison Director of Interactive Services Austin & Williams Advertising I Branding I Digital I Direct   125 Kennedy Drive,  Suite 100   I  Hauppauge, NY 11788 T 631.231.6600 X 119   F 631.434.7022   http://www.austin-williams.com Blog:      http://www.austin-williams.com/blog Twitter:  http://www.twitter.com/austin_williams Can you share your processing code? On Thu, Aug 2, 2012 at 9:47 AM, Dean Lawrence <deanlaw@gmail.com> wrote: ----- Excess quoted text cut - see Original Post for more -----