I have a query regarding the security of personal files on my C: drive during file uploads to external web sites (such as photos to MySpace, videos to YouTube, file attachments to web-based email providers, on-line file converters, etc.)
Generally when I upload a file a field on the external site will ask for the path on my C: drive to the relevant file (e.g. C:\MyDocuments\photos\picture.jpg) prior to carrying out the upload. It occurred to me that in doing this I must be granting some direct access to my computerís hard drive, and I wondered if (unscrupulous) sites could covertly trawl the drive and extract other files in addition to the ones I specified for upload.
Does anyone know if this is possible, and if the ZoneAlarm firewall would protect against it? For information, my firewall has Internet Zone security set to high, and Trusted Zone set to medium. I use Windows XP and my file folders have remote access disabled.