RE: [PHP] Secure File Upload

2002-06-06 Thread Miguel Cruz
On Thu, 6 Jun 2002, Christoph Starkmann wrote: > Yes. In fact, i would like to prevent having users upload too > big files. There are two reasons: > First, I don't want my server space to be consumed by files too big. > Second, I want to be able to prevent my (limited) traffic to > be "exhausted"

RE: [PHP] Secure File Upload

2002-06-06 Thread Christoph Starkmann
Hi again, Dan! > But you still have to rely on your visitors as they could simply use > another web browser should they wish to DoS your site. > Security measures > such as logging in before allowing a file upload can come in > useful here. I think I have to agree at this point. I was just hop

Re: [PHP] Secure File Upload

2002-06-06 Thread Dan Hardiker
>> I know this, not this new to CGI... ;) The only thing I >> thought/hoped was that maybe there's a way to recieve the file size >> information before upping the entire file. > > It is possible with some browsers: > http://marc.theaimsgroup.com/?l=php-general&m=102079018906224&w=2 But you s

Re: [PHP] Secure File Upload

2002-06-06 Thread Jason Wong
On Thursday 06 June 2002 17:53, Christoph Starkmann wrote: > I know this, not this new to CGI... ;) The only thing I thought/hoped > was that maybe there's a way to recieve the file size information before > upping the entire file. It is possible with some browsers: http://marc.theaimsgro

RE: [PHP] Secure File Upload

2002-06-06 Thread Christoph Starkmann
Hi Dan! > >> A) Do you want to place a limit on the size of a single file being > >> uploaded? > [...] > > Second, I want to be able to prevent my (limited) traffic to > > be "exhausted". Simple reason: I pay for anything above let's say > > 10 GB of traffic. So what PHP offers to me AFAIK enabl

RE: [PHP] Secure File Upload

2002-06-06 Thread Dan Hardiker
>> A) Do you want to place a limit on the size of a single file being >> uploaded? [...] > Second, I want to be able to prevent my (limited) traffic to > be "exhausted". Simple reason: I pay for anything above let's say > 10 GB of traffic. So what PHP offers to me AFAIK enables me to > protect my

RE: [PHP] Secure File Upload

2002-06-06 Thread Christoph Starkmann
Hi Jim! > ok, here are a few questions for you to clarify things. > A) Do you want to place a limit on the size of a single file being > uploaded? Yes. In fact, i would like to prevent having users upload too big files. There are two reasons: First, I don't want my server space to be consumed

Re: [PHP] Secure File Upload

2002-06-05 Thread Jim lucas
ok, here are a few questions for you to clarify things. A) Do you want to place a limit on the size of a single file being uploaded? B) Do you want to place a restriction that says after n'th number of files that have been uploaded equal 'X' ammount of space on the server disable file uploads?

Re: [PHP] Secure File Upload

2002-06-05 Thread Rodolfo Gonzalez
On Wed, 5 Jun 2002, Lowell Allen wrote: > Add this to your HTML form: > The manual says this can be easily bypassed. Regards. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Secure File Upload

2002-06-05 Thread Lowell Allen
> From: "andy" <[EMAIL PROTECTED]> > > // original question: > > > I would like to be able to really PREVENT uploads, let's say >>> bigger than 10 MB?! >>> >> Add this to your HTML form: >> >> >> >> HTH > > > > I tryed this, too. But this does not work at all! I use IE 5.5 and it did > n

Re: [PHP] Secure File Upload

2002-06-05 Thread Jason Wong
On Wednesday 05 June 2002 16:41, andy wrote: > // original question: > > > I would like to be able to really PREVENT uploads, let's say > > > > bigger than 10 MB?! > > > > Add this to your HTML form: > > > > > > > > HTH > > > > I tryed this, too. But this does not work at all! I use IE 5.5 and

[PHP] Re [PHP] Secure File Upload

2002-06-05 Thread Stephen Phillips
Hi, Not sure if this would work in limiting the file size of an upload or not, but I noticed a line in my php.ini file which seems to limit the size of any data sent by a POST, of course this would be a serverwide setting I guess.   the line is; post_max_size = 8M;   I'm assuming this would b

Re: [PHP] Secure File Upload

2002-06-05 Thread andy
// original question: I would like to be able to really PREVENT uploads, let's say > > bigger than 10 MB?! > > > Add this to your HTML form: > > > > HTH I tryed this, too. But this does not work at all! I use IE 5.5 and it did not make any difference. Is there something else we have to take

Re: [PHP] Secure File Upload

2002-06-04 Thread Lowell Allen
> From: Christoph Starkmann <[EMAIL PROTECTED]> > > Hi There! > > When uploading a file with PHP, AFAIK I can only control what will be stored > on the server. So if someone sends me 100 MB, these will be deleted > immediately. But, unfortunately, the traffic is produced nevertheless. Is > there