Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
express-fileupload
Advanced tools
The express-fileupload npm package is a middleware for handling file uploads in Express applications. It simplifies the process of uploading files to a server by providing an easy-to-use interface and various configuration options.
Basic File Upload
This feature allows for basic file uploads. The code sets up an Express server with the express-fileupload middleware, and defines a POST route to handle file uploads. Uploaded files are moved to a specified directory on the server.
const express = require('express');
const fileUpload = require('express-fileupload');
const app = express();
app.use(fileUpload());
app.post('/upload', (req, res) => {
if (!req.files || Object.keys(req.files).length === 0) {
return res.status(400).send('No files were uploaded.');
}
let sampleFile = req.files.sampleFile;
sampleFile.mv('/somewhere/on/your/server/filename.jpg', function(err) {
if (err)
return res.status(500).send(err);
res.send('File uploaded!');
});
});
app.listen(3000, () => {
console.log('Server started on http://localhost:3000');
});
File Size Limit
This feature allows setting a file size limit for uploads. The code configures the express-fileupload middleware to limit the file size to 50MB.
const express = require('express');
const fileUpload = require('express-fileupload');
const app = express();
app.use(fileUpload({
limits: { fileSize: 50 * 1024 * 1024 }, // 50MB
}));
app.post('/upload', (req, res) => {
if (!req.files || Object.keys(req.files).length === 0) {
return res.status(400).send('No files were uploaded.');
}
let sampleFile = req.files.sampleFile;
sampleFile.mv('/somewhere/on/your/server/filename.jpg', function(err) {
if (err)
return res.status(500).send(err);
res.send('File uploaded!');
});
});
app.listen(3000, () => {
console.log('Server started on http://localhost:3000');
});
Using Temp Files
This feature allows the use of temporary files during the upload process. The code configures the express-fileupload middleware to use temporary files and specifies a directory for these temp files.
const express = require('express');
const fileUpload = require('express-fileupload');
const app = express();
app.use(fileUpload({
useTempFiles: true,
tempFileDir: '/tmp/'
}));
app.post('/upload', (req, res) => {
if (!req.files || Object.keys(req.files).length === 0) {
return res.status(400).send('No files were uploaded.');
}
let sampleFile = req.files.sampleFile;
sampleFile.mv('/somewhere/on/your/server/filename.jpg', function(err) {
if (err)
return res.status(500).send(err);
res.send('File uploaded!');
});
});
app.listen(3000, () => {
console.log('Server started on http://localhost:3000');
});
Multer is a Node.js middleware for handling multipart/form-data, which is primarily used for uploading files. It is highly configurable and allows for fine-grained control over file storage and handling. Compared to express-fileupload, Multer offers more flexibility and control over file handling, but it may require more setup and configuration.
Formidable is a Node.js module for parsing form data, especially file uploads. It is a low-level library that provides a lot of control over file uploads and form parsing. Compared to express-fileupload, Formidable is more complex and offers more detailed control over the file upload process, but it may be more difficult to use for simple use cases.
Busboy is a Node.js module for parsing incoming HTML form data. It is a low-level library that provides a stream-based interface for handling file uploads. Compared to express-fileupload, Busboy offers more control and efficiency for handling large file uploads, but it requires more setup and understanding of streams in Node.js.
Simple express middleware for uploading files.
As of v0.1.0
, there is NO MORE application/x-www-form-urlencoded
SUPPORT! Moving forward, express-fileupload is considered a "multipart" solution only.
If you want to parse urlencoded
requests, use body-parser.
No more support for versions of Node older than v4. Use with lower versions of Node at your own risk!
# With NPM
npm install --save express-fileupload
# With Yarn
yarn add express-fileupload
When you upload a file, the file will be accessible from req.files
.
<input name="foo" type="file" />
req.files.foo
:app.post('/upload', function(req, res) {
console.log(req.files.foo); // the uploaded file object
});
The req.files.foo object will contain the following:
req.files.foo.name
: "car.jpg"req.files.foo.mv
: A function to move the file elsewhere on your serverreq.files.mimetype
: The mimetype of your filereq.files.data
: A buffer representation of your fileYour node.js code:
const express = require('express');
const fileUpload = require('express-fileupload');
const app = express();
// default options
app.use(fileUpload());
app.post('/upload', function(req, res) {
if (!req.files)
return res.status(400).send('No files were uploaded.');
// The name of the input field (i.e. "sampleFile") is used to retrieve the uploaded file
let sampleFile = req.files.sampleFile;
// Use the mv() method to place the file somewhere on your server
sampleFile.mv('/somewhere/on/your/server/filename.jpg', function(err) {
if (err)
return res.status(500).send(err);
res.send('File uploaded!');
});
});
Your HTML file upload form:
<html>
<body>
<form ref='uploadForm'
id='uploadForm'
action='http://localhost:8000/upload'
method='post'
encType="multipart/form-data">
<input type="file" name="sampleFile" />
<input type='submit' value='Upload!' />
</form>
</body>
</html>
express-fileupload supports multiple file uploads at the same time.
Let's say you have three files in your form, each of the inputs with the name my_profile_pic
, my_pet
, and my_cover_photo
:
<input type="file" name="my_profile_pic" />
<input type="file" name="my_pet" />
<input type="file" name="my_cover_photo" />
These uploaded files would be accessible like so:
app.post('/upload', function(req, res) {
// Uploaded files:
console.log(req.files.my_profile_pic.name);
console.log(req.files.my_pet.name);
console.log(req.files.my_cover_photo.name);
});
Pass in Busboy options directly to the express-fileupload middleware. Check out the Busboy documentation here.
app.use(fileUpload({
limits: { fileSize: 50 * 1024 * 1024 },
}));
Pass in non-Busboy options directly to the middleware. These are express-fileupload specific options.
Option | Acceptable Values | Details |
---|---|---|
safeFileNames |
| Strips characters from the upload's filename. You can use custom regex to determine what to strip. If set to true , non-alphanumeric characters except dashes and underscores will be stripped. This option is off by default.Example #1 (strip slashes from file names): app.use(fileUpload({ safeFileNames: /\\/g })) Example #2: app.use(fileUpload({ safeFileNames: true })) |
Pull Requests are welcomed!
Brian White for his stellar work on the Busboy Package and the connect-busboy Package
FAQs
Simple express file upload middleware that wraps around Busboy
The npm package express-fileupload receives a total of 255,770 weekly downloads. As such, express-fileupload popularity was classified as popular.
We found that express-fileupload demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.