8

I have a got a file server and a web server. They are running on physically different machines.

I would like to download a file from the FTP server via JavaScript. The reason I have to do it via JavaScript is that I have an external application and I can only inject JavaScript into that application.

Basically, I need to specify ftp address username and password. But I am concerning about security as people can view FTP credentials.

What is the best way to implement such scenario?

Thanks for your help

Regards

Improve this question
2
  • Injecting JavaScript into another application to force it to download a file via FTP? Sounds kinda atack-y to me. Commented Jan 4, 2011 at 14:46
  • we have a defect management system that allows us to inject javascript code into forms) not attacking anything:) Commented Jan 4, 2011 at 15:00

4 Answers 4

Reset to default
12

Javascript only speaks HTTP and WebSockets (on newer browsers), and not FTP. In that situation, keeping it all on the client-side, you'd probably have to write a Flash or Java applet that handles the actual FTP protocol, and interface with Javascript to provide interactivity.

Unless you're planning on redirecting the browser to the ftp site, passing in the username and password? Are you concerned about the users getting the FTP information, or are you concerned with man-in-the-middle attacks sniffing the plaintext FTP credentials?

Improve this answer
Sign up to request clarification or add additional context in comments.

2 Comments

I can use server site scripting and redirect user to ftp site. if I specify ftp credentials, I am concerning users getting credentials and also attacks. I think the only secure way to use server side scripting.
It is. That's the only way to make sure your credentials are not in the clear for everyone to see.
2

JavaScript doesn't support FTP. What you need is a server-side or a more robust client-side language to access the remote server.

Improve this answer

Comments

1

If by "downloading" you mean "prompt user to save a file from external link" (which basically means open a new window with URL that points to a file) then you can just point user to a script you have control over.

window.open('http://myserver/get_file/filename');

And your server-side get_file script will do all the work of connecting to a FTP and fetching a file

Improve this answer

1 Comment

You are right; I would like user to click on a link and save the file to local. Isnt there any way to do it without server side? I can use asp.net as server side scripting, but some files are huge(bigger then 1gb)... where I am going to define to show save as file dialog then? on server side?
0

How about creating an iframe and setting the url to ftp://whatever?

Improve this answer

Comments

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.