I have been asked lately by a few my colleague why they got C:\fakepath after they upload a file or picture to a website in Internet Exlorer, namely Craiglist as one of them. After a bit of research, the mystery was unveiled.
This requirement is already implemented in Internet Explorer 8 – the real path to the file will be shown only if the page that contains the control is added to the trusted sites collection of the browser.
Note that this C:\fakepath doesn’t only happen on IE, but on IE 9 as well.
To get around it, you can either add the websites you are working with to the Trusted Sites list.
Or turn off the option called “Include local directory path when uploading files to a server”.
And obviously, adding the sites to the trusted sites list is highly recommended. Changing the custom level breaches the security level in IE, which may cause other issues down the road.