Re: able to upload 28 meg file, yet php.ini limits posts to 10 megs. What is up with that?

MikeB wrote:
On May 31, 10:45 am, Lawrence Krubner <lawre...@xxxxxxxxxxx> wrote:
NC wrote:
On May 31, 12:04 am, Lawrence Krubner <lawre...@xxxxxxxxxxx> wrote:
NC wrote:
And what, if anything, is LimitRequestBody directive
in Apache set to?
This returns nothing:
root@ldc310:~# cd /etc/apache2/
root@ldc310:/etc/apache2# grep -R LimitRequestBody *
So I assume it is not set.
And if it's not set, it takes the default value, zero (meaning, no
limit).
And while we're checking for possibilities, are you editing
the same php.ini PHP is using?
I assume, but how could I be sure?
Run phpinfo() FROM THE BROWSER, not from command line. Look for
"Configuration File (php.ini) Path" in the output. The command-line
interpreter, the server module, and the CGI/FastCGI executable can
each have a different php.ini...
Since it is PHP version 5, I assume this is the right path for
editing:
root@ldc310:/# nano /etc/php5/cli/php.ini
I don't think so; note the "cli" in the path. Looks like you're
editing the php.ini that's used by the command-line interpreter,
not the one used by the Apache module.
Thanks for catching that. Seems you were right.

If anyone has time and wants to do me a big favor, go here:

http://www.cyberbitten.com/my_private_page.php

login with:

user: test
password: test

then go here and try to upload a file that is bigger than 10 megs:

http://www.cyberbitten.com/my_private_page.php?formName=mp_photos.htm

I appreciate anyone who can give this a test.

-- lawrence krubner

I've started an upload of a 20MB .exe file(Nessus-3.2.1.exe).

As I said in another post, perhaps you want to do a few checks to save
your bandwidth. Check that the file type is correct. Check the size
*before* you start the upload.

I'll report back if the upload crashes.

You can't tell the "file type" until the file is uploaded. All you know is the file name - and a .jpg file does not necessarily have to be a ..jpg file - it could be anything.

You also don't know the size before the file is uploaded - again, all you know is the size provided by the browser (if it is - it may not be).

And you can't check anything in your code before the file is uploaded anyway - your code doesn't get control until after the file is uploaded.

There are ways to control the size in HTML, but those can be ignored by the browser.

In short, you can't guarantee anything about the file until it has been uploaded.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@xxxxxxxxxxxxx
==================
.

Relevant Pages

  • Re: able to upload 28 meg file, yet php.ini limits posts to 10 megs. What is up with that?
    ... in Apache set to? ... interpreter, the server module, and the CGI/FastCGI executable can ... editing the php.ini that's used by the command-line interpreter, ... I've started an upload of a 20MB .exe file. ...
    (comp.lang.php)
  • Re: able to upload 28 meg file, yet php.ini limits posts to 10 megs. What is up with that?
    ... in Apache set to? ... "Configuration File Path" in the output. ... editing the php.ini that's used by the command-line interpreter, ... I've started an upload of a 20MB .exe file. ...
    (comp.lang.php)
  • Re: Editing HTML in publisher
    ... In the browser go to Help and then About IE or FF or whatever the name of the browser, ... Assuming that you are using FireFox or some other browser than IE, the reason the links are not working is that all the text has been converted to images, which kills the links. ... I suspect the reason you are getting these images is because you have grouped together those design elements. ... changing upon new upload. ...
    (microsoft.public.publisher.webdesign)
  • Re: upload word doc in asp.net
    ... If you're using a browser there is not much you can do as the Upload/Browse ... But this won't be an easy task and of course require messy ActiveX ... > so that the user can use Microsoft Word to modify the document. ... my problem is to upload the document in the server without too ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: [Full-Disclosure] Friendly and secure desktop operating system
    ... >> download them. ... > And even then you can't do a good job of keeping the main browser from lying to ... - You have a File Open/Save service process that has access to all files ... - Web browser's Upload function makes an IPC call to File Open/Save ...
    (Full-Disclosure)