Re: Secure File Upload
| From: | Dan Hardiker | Date: | Thu, 06 Jun 2002 10:22:47 +0000 |
| Subject: | Re: Secure File Upload | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-100916@lists.php.net to get a copy of this message | ||
>> I know this, not this new to CGI... ;))))) The only thing I
>> thought/hoped was that maybe there's a way to recieve the file size
>> information before upping the entire file.
>
> It is possible with some browsers:
>
> http://marc.theaimsgroup.com/?l=php-general&m=102079018906224&w=2
But you still have to rely on your visitors as they could simply use
another web browser should they wish to DoS your site. Security measures
such as logging in before allowing a file upload can come in useful here.
--
Dan Hardiker [dhardiker@staff.firstcreative.net]
ADAM Software & Systems Engineer
First Creative Ltd