Autosave, progress and secure uploads
Save answers step by step, resume securely, upload supported files and understand generated storage and CSRF handling.
Guides in this workflow
Follow the guide that matches the exact action, filter, menu change or issue.
Understand step autosave
The browser sends current answers, step key/number and progress to the secure autosave endpoint.
Understand the autosave answer payload
Answers are submitted as the current structured field values and saved in bulk.
Understand progress calculation
Current step and percentage are updated so the recipient can resume.
Understand refreshed CSRF values
Successful JSON responses return current CSRF name/hash for the next request.
Resolve an expired staff JSON session
The module-scoped guard returns JSON 401 and removes only stale redirects pointing to top-bar/status JSON endpoints.
Upload a supporting file
Use the step upload control; the secure token determines the request.
Understand supported upload extensions
Supported extensions are PDF, DOC/DOCX, XLS/XLSX, PPT/PPTX, JPG/JPEG/PNG/GIF/WEBP/SVG, TXT, CSV, ZIP, MP4, MOV and WEBM.
Understand request upload folders
Files are stored beneath a request-specific module upload folder protected by generated web-server rules.
Understand generated filenames
The module generates stored filenames instead of trusting the submitted client filename.
Review upload activity
Each accepted upload is linked to the request and recorded in activity evidence.
Download an uploaded file as staff
Use the request Uploads tab and module View access; the controller validates request/upload relationship.
Resolve a rejected upload
Check extension, file availability, server upload limits, writable directory and secure-token validity.
Resume after an upload
Return to the same step; saved answers and uploaded files remain linked.