Question?

I ran some tests with a sniffer logging my connection to see what was being sent to this site's webserver for a couple different file upload operations. First, I tested the image attachment function for forum posts and then a server utility that uploads XML files for config settings updates. Both of these use those "Browse..." button functions which let you navigate to a directory and file on your local system...

Neither of these upload functions sent the file path. The filename itself was sent, probably because the destination site/app would normally save the files original filename in its operations, but, the path and disk information was not sent.



All of that seems to make sense. The navigation part is all local PC operation. It's the local PC that takes the selected file and transmits its content in packets to the remote webserver. It's not the webserver reaching into your PC to grab the file, so, the webserver has no use for path information on files uploaded anyway.

I doubt that a simple file upload dialog with Facebook would work any differently. If it appears to use the normal "browse local file..." dialog, then it's probably the same as the above.