-- Thomas Weidner <[EMAIL PROTECTED]> wrote (on Tuesday, 09 September 2008, 07:42 PM +0200): > Simply answer the question to yourself: > > Zend_File_Transfer is the server component which comes in place as soon > the the files have been uploaded. > > MAX_FILE_SIZE is a HTTP attribut of Forms which are used to limit the > transferred size of your form. > If you do not set it, your users would be able to upload 10GB files > without problems. > (Not taking in accout your php.ini settings of course). > > So you know the answer. > > It's always good to have several layers of security, even when they are > weak. :-)
That said, we should probably have support for auto-adding it via the view helper and form element... > ----- Original Message ----- From: "SiCo007" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Tuesday, September 09, 2008 6:59 PM > Subject: [fw-general] File_Transfer Element - MAX_FILE_SIZE > > >> >> A simple question, do we still need to add the hidden form field >> MAX_FILE_SIZE when using the file form element, I assume we do as it's not >> in my test form! >> >> If it doesn't already is there a way that the element could do this for us >> (lazy, yes!!). -- Matthew Weier O'Phinney Software Architect | [EMAIL PROTECTED] Zend Framework | http://framework.zend.com/
