Form with images

Hello, my website has a form where the user can attach multiple images. These could be sensitive images, so I'd like to send this form data to another user that should be able to view the images, but only that person should be able to view.

I don't need Cloudflare Images product. Should I use R2 for this? Is it possible to upload the images to a public bucket, but with the images only accessible by those that have the secret link?

PPaul Hello, my website has a form where the user can attach multiple images. These co...

Hello, I’m Allie!•12/23/23, 12:13 AM

Yeah. As long as the ID of the image is sufficiently random, then randos shouldn't be able to stumble upon an image

PaulOP•12/23/23, 12:14 AM

ok, and there's no way through an API or something where someone could "list" the items in the bucket?

PaulOP•12/23/23, 12:14 AM

cuz then i'd be completely screwed

PPaul ok, and there's no way through an API or something where someone could "list" th...

Hello, I’m Allie!•12/23/23, 12:14 AM

Not without an API key

PaulOP•12/23/23, 12:14 AM

Ok, and so to be certain that the files are uploaded with sufficient ID, I should be doing the uploading server side through a Worker?

PaulOP•12/23/23, 12:15 AM

so Worker kind of acts as a middleman uploader?

PPaul Ok, and so to be certain that the files are uploaded with sufficient ID, I shoul...

Hello, I’m Allie!•12/23/23, 12:15 AM

Yeah, and then return the ID generated in the Response

PaulOP•12/23/23, 12:16 AM

seems simple enough, thanks !

PaulOP•12/23/23, 12:16 AM

this presigned URL thing overkill for this?

PPaul this presigned URL thing overkill for this?

Hello, I’m Allie!•12/23/23, 12:20 AM

You can do that, but if you are already using a Worker, I wouldn't bother

PaulOP•12/23/23, 12:21 AM

So the Worker gets full access to the R2 binding, so it's up to me to make sure i don't do anything bad

PaulOP•12/23/23, 12:22 AM

i'm trying to figure out if I should upload images as they get selected, or do it all at once when the form is submitted

PaulOP•12/23/23, 12:22 AM

any suggestions?

PPaul any suggestions?

Hello, I’m Allie!•12/23/23, 12:22 AM

Depending on their size, it might make the decision for you

PaulOP•12/23/23, 12:22 AM

I was worried if I do it all at once the worker would timeout or something... but isn't there unbound workers now?

PPaul I was worried if I do it all at once the worker would timeout or something... bu...

Hello, I’m Allie!•12/23/23, 12:23 AM

Yes, but those are being phased out in place of Standard Billing

Hello, I’m Allie!•12/23/23, 12:23 AM

But all Workers can run indefinitely

Hello, I’m Allie!•12/23/23, 12:23 AM

The only thing explicitly limited is CPU Time, which isn't consumed while streaming(for example from a browser to R2)

PaulOP•12/23/23, 12:24 AM

Ok well that's perfect then, it would definitely be easier to do it all at once, might save me a ton of space too from abandoned forms

PaulOP•12/31/23, 12:34 AM

What happens if I try to upload a non-image file to Cloudflare Images? I'm wondering what kind of validation i need to do once the form is submitted to make sure users aren't trying to upload anything other than images.

Form with images

Similar Threads

Similar Threads

Similar Threads