note 95539 added to features.file-upload.errors
| From: | paulabean73 at gmail dot com | Date: | Thu, 07 Jan 2010 21:24:47 +0000 |
| Subject: | note 95539 added to features.file-upload.errors | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-164766@lists.php.net to get a copy of this message | ||
@svenr at selfhtml dot org 23-Apr-2007 10:15:
Your "rant" about MAX_FILE_SIZE is unjustified. PHP introduced this feature in the hope
that user agents would implement client side checking. This would prevent the user from uploading a
(potentially big) file and only discovering it violated the file size limits afterwards.
You also fail to understand some basic English words. You write that it has never been true that
this allows browsers to check the file size. Even though no browser does this as of yet, it still
*allows* the browser to do it. You also write that it is "simply wrong" that the PHP
documentation implies that a browser may alert the user. The key word here is "may".
Again, even though no browser does it, user ages *may* do it.
Finally you conclude with an advice against using this hidden form field, because you should always
check server side. These two however are not mutually exclusive, and any sane web developer knows
they should *always* check everything server side, because the client can never be trusted.
This feature is not a security mechanism, but rather a conveniency for browsers. I personally think
it is a shame no browser has implemented it yet, because it would save a lot of time uploading files
and discovering they were too big afterwards.
----
Server IP: 69.147.83.197
Probable Submitter: 81.204.31.28
----
Manual Page -- http://www.php.net/manual/en/features.file-upload.errors.php
Edit -- https://master.php.net/note/edit/95539
Del: integrated -- https://master.php.net/note/delete/95539/integrated
Del: useless -- https://master.php.net/note/delete/95539/useless
Del: bad code -- https://master.php.net/note/delete/95539/bad+code
Del: spam -- https://master.php.net/note/delete/95539/spam
Del: non-english -- https://master.php.net/note/delete/95539/non-english
Del: in docs -- https://master.php.net/note/delete/95539/in+docs
Del: other reasons-- https://master.php.net/note/delete/95539
Reject -- https://master.php.net/note/reject/95539
Search -- https://master.php.net/manage/user-notes.php