如果我不关心安全性，是否可以通过客户端编程（特别是JS）进行文件IO？

Question

I realize this is a HUGE , MASSIVE security risk, but I have my reasons. I'm not asking whether it's a good idea, just whether it is possible at all. Doesn't necessarily need to be JS, but it does need to be browser based and client side.

Specifics:

1. Client must be able to create and write to server-side file.
2. Cross browser/platform solution is preferred, but solutions specific to one environment would also be good.
3. Preferably the solution would not require anything beyond the browser's default state, but if it requires some plugin(s) to work, so be it.

And @Cheeso, definitely not a virus. This is more theoretical than anything at this point.

Answer 1

Do you speak HTML5? Can you force your users to use Google Chrome? You can use the filesystem API: here you can find what you need to start reading/writing files .

Answer 2

You just added "read and write to a server -side file" to your description... and that's a HUGELY different question.

If you want to read/write a client -side file, and you can't just have a file upload/download like normal websites, you should look into using a signed Java applet (see this website for details) - IIRC Facebook used such an applet in its early days so users could upload multiple photos at a time. Java applets seem to be going the way of the dodo, though, so YMMV.

But if you want to read/write a server -side file, then just about any server will be able to do that, without any browser-side trickery. Google is your friend, ie look up "PHP write to file."