RE: [PHP] MAX_FILE_SIZE not working with file uploads
| From: | Dan Parry | Date: | Sun, 23 Sep 2007 01:00:45 +0000 |
| Subject: | RE: [PHP] MAX_FILE_SIZE not working with file uploads | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-262375@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> From: Jeff Cohan [mailto:jeff@nsiteful.com]
> Sent: 23 September 2007 02:45
> To: php-general@lists.php.net
> Subject: Re: [PHP] MAX_FILE_SIZE not working with file uploads
>
>
>
> Dan Parry wrote:
> > I might be wrong but this would be classed as
> > 'exploitable'... Webservers should not be allowed
> > to read from or write to clients... Of course there
> > is ActiveX...
>
> I think we're off the point.
>
> My script is simply interrogating the value of the
> $_FILES[userfile][size] array element. It's coming up as ZERO if it
> exceeds the MAX_FILE_SIZE. That seems odd to me. But maybe that's
> the way it's SUPPOSED to work. That's why I started this thread out
> with "What am I missing?".
>
> Said another way:
>
> It seems that the server had to know the size of the file in order
> to know it exceeded MAX_FILE_SIZE. So how can my script find out the
> size?
I'm not sure it can... The server has to accept the file before it can
process any details on it
The MAX_FILE_SIZE input field is notoriously unreliable... I think if it
returns zero (0) then the PHP limit is reached
Dan