MAX_FILE_SIZE is not checked by browsers (bug #40387)

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@232469 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
Jakub Vrana 2007-03-23 17:37:48 +00:00
parent de99499e16
commit 107774c160

View file

@ -1,5 +1,5 @@
<?xml version="1.0" encoding="iso-8859-1"?>
<!-- $Revision: 1.89 $ -->
<!-- $Revision: 1.90 $ -->
<chapter id="features.file-upload">
<title>Handling file uploads</title>
@ -65,8 +65,7 @@
</para>
<para>
The <literal>MAX_FILE_SIZE</literal> hidden field (measured in bytes) must
precede the file input field, and its value is the maximum filesize accepted.
This is an advisory to the browser, PHP also checks it.
precede the file input field, and its value is the maximum filesize accepted by PHP.
Fooling this setting on the browser side is quite easy, so never rely
on files with a greater size being blocked by this feature.
The PHP settings for maximum-size, however, cannot be fooled.