diff --git a/features/file-upload.xml b/features/file-upload.xml index 168cfe5e7e..2e44802c69 100644 --- a/features/file-upload.xml +++ b/features/file-upload.xml @@ -64,12 +64,13 @@ The MAX_FILE_SIZE hidden field (measured in bytes) must precede the file input field, and its value is the maximum filesize accepted by PHP. - Fooling this setting on the browser side is quite easy, so never rely - on files with a greater size being blocked by this feature. - The PHP settings for maximum-size, however, cannot be fooled. - This form element should always be used as it - saves users the trouble of waiting for a big file being transferred only - to find that it was too big and the transfer failed. + This form element should always be used as it saves users the trouble of + waiting for a big file being transferred only to find that it was too + large and the transfer failed. Keep in mind: fooling this setting on the + browser side is quite easy, so never rely on files with a greater size + being blocked by this feature. It is merely a convenience feature for + users on the client side of the application. The PHP settings (on the server + side) for maximum-size, however, cannot be fooled.