RE: [PHP] Secure File Upload

2002-06-06 Thread Christoph Starkmann
Hi Jim! ok, here are a few questions for you to clarify things. A) Do you want to place a limit on the size of a single file being uploaded? Yes. In fact, i would like to prevent having users upload too big files. There are two reasons: First, I don't want my server space to be consumed by

RE: [PHP] Secure File Upload

2002-06-06 Thread Dan Hardiker
A) Do you want to place a limit on the size of a single file being uploaded? [...] Second, I want to be able to prevent my (limited) traffic to be exhausted. Simple reason: I pay for anything above let's say 10 GB of traffic. So what PHP offers to me AFAIK enables me to protect my space,

RE: [PHP] Secure File Upload

2002-06-06 Thread Christoph Starkmann
Hi Dan! A) Do you want to place a limit on the size of a single file being uploaded? [...] Second, I want to be able to prevent my (limited) traffic to be exhausted. Simple reason: I pay for anything above let's say 10 GB of traffic. So what PHP offers to me AFAIK enables me to

Re: [PHP] Secure File Upload

2002-06-06 Thread Jason Wong
On Thursday 06 June 2002 17:53, Christoph Starkmann wrote: I know this, not this new to CGI... ;) The only thing I thought/hoped was that maybe there's a way to recieve the file size information before upping the entire file. It is possible with some browsers:

Re: [PHP] Secure File Upload

2002-06-06 Thread Dan Hardiker
I know this, not this new to CGI... ;) The only thing I thought/hoped was that maybe there's a way to recieve the file size information before upping the entire file. It is possible with some browsers: http://marc.theaimsgroup.com/?l=php-generalm=102079018906224w=2 But you still have

RE: [PHP] Secure File Upload

2002-06-06 Thread Christoph Starkmann
Hi again, Dan! But you still have to rely on your visitors as they could simply use another web browser should they wish to DoS your site. Security measures such as logging in before allowing a file upload can come in useful here. I think I have to agree at this point. I was just hoping

RE: [PHP] Secure File Upload

2002-06-06 Thread Miguel Cruz
On Thu, 6 Jun 2002, Christoph Starkmann wrote: Yes. In fact, i would like to prevent having users upload too big files. There are two reasons: First, I don't want my server space to be consumed by files too big. Second, I want to be able to prevent my (limited) traffic to be exhausted.

Re: [PHP] Secure File Upload

2002-06-05 Thread andy
// original question: snip I would like to be able to really PREVENT uploads, let's say bigger than 10 MB?! Add this to your HTML form: input type=hidden name=MAX_FILE_SIZE value=1024 HTH /snip I tryed this, too. But this does not work at all! I use IE 5.5 and it did not make any

[PHP] Re [PHP] Secure File Upload

2002-06-05 Thread Stephen Phillips
Hi, Not sure if this would work in limiting the file size of an upload or not, but I noticed a line in my php.ini file which seems to limit the size of any data sent by a POST, of course this would be a serverwide setting I guess. the line is; post_max_size = 8M; I'm assuming this would be

Re: [PHP] Secure File Upload

2002-06-05 Thread Jason Wong
On Wednesday 05 June 2002 16:41, andy wrote: // original question: snip I would like to be able to really PREVENT uploads, let's say bigger than 10 MB?! Add this to your HTML form: input type=hidden name=MAX_FILE_SIZE value=1024 HTH /snip I tryed this, too. But this

Re: [PHP] Secure File Upload

2002-06-05 Thread Lowell Allen
From: andy [EMAIL PROTECTED] // original question: snip I would like to be able to really PREVENT uploads, let's say bigger than 10 MB?! Add this to your HTML form: input type=hidden name=MAX_FILE_SIZE value=1024 HTH /snip I tryed this, too. But this does not work at

Re: [PHP] Secure File Upload

2002-06-05 Thread Rodolfo Gonzalez
On Wed, 5 Jun 2002, Lowell Allen wrote: Add this to your HTML form: input type=hidden name=MAX_FILE_SIZE value=1024 The manual says this can be easily bypassed. Regards. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Secure File Upload

2002-06-05 Thread Jim lucas
? (this is what it sounds like you are asking, to me anyways) Answer these two questions and it will help me alot Jim Lucas - Original Message - From: Christoph Starkmann [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 04, 2002 8:34 AM Subject: [PHP] Secure File Upload Hi

[PHP] Secure File Upload

2002-06-04 Thread Christoph Starkmann
Hi There! When uploading a file with PHP, AFAIK I can only control what will be stored on the server. So if someone sends me 100 MB, these will be deleted immediately. But, unfortunately, the traffic is produced nevertheless. Is there any way to check the file size before uploading the file or

Re: [PHP] Secure File Upload

2002-06-04 Thread Lowell Allen
From: Christoph Starkmann [EMAIL PROTECTED] Hi There! When uploading a file with PHP, AFAIK I can only control what will be stored on the server. So if someone sends me 100 MB, these will be deleted immediately. But, unfortunately, the traffic is produced nevertheless. Is there any way