upload file size

mafromm

I created a file upload script in php. I limit the upload file size by checking the size of the file. Everything works great for files 12M and under. I set the limit to about 5MB, and if I try to upload a file larger than 5 but less then 12 my if statement is executed. If a file is larger than 12MB my if statement is skiped and the code moves on with the else statement.

// start for loop
for($x=0;$x<$uploadNeed;$x++){
$file_name = $FILES['uploadFile'. $x]['name'];
$file_size = $FILES['uploadFile'. $x]["size"];
//echo $file_size . " ";
//12MB = 12582912
if ($file_size > 5000000){
$copyfail = 1;
echo "The file, " . $file_name . ", is above 12MB and cannot be uploaded. Please reduce the file size or select a different file. ";
}else{

bradgrafelman

Did you check to make sure that no errors are being returned (e.g. it's exceeding the max size defined in php.ini) ? More info on handling file upload errors can be found here: [man]features.file-upload.errors[/man].

mafromm

I checked for errors and none were reported.
My max size settings in the php.ini file are well above the file the 5MB file size limit set by the if statement, and the execution time settings are above the amount of time it takes the upload attempt.

Side note: it seems that even thought I have the 5MB limit if statement, larger file are still processed and upload is attempted.

mafromm

I increased the value of Max_File_Size in the html form. My if statement is now executed for files above 12MB. Max_File_Size was set to 12MB. I increased it to 48MB. If I try to yupload a file larger than 48MB the page errors out. Is there a way that Ican reject a while that is larger than my set amount before it is processed by the upload script?

bradgrafelman

Do you mean have their browser reject it so they don't waste the time uploading a 50MB file, only to find it was too large?

The answer to that, then, is no... at least, not unless you're willing to find some Java applet or something of the sort that can read the filesize and display an error if necessary; browsers simply don't offer this functionality (despite the supposed use of the hidden form field as described in the PHP manual).