|
Posted by ct... on 12/19/06 09:08
Hi Avi,
> This scenario is kinda problematic for me, as the authentication check
> is only performed when the entire request is complete and reached PHP.
> So posting 5MB would result in posting 10MB for an unauthenticated
> user.
How about restricting access to your upload-form to authenticated
users only? Like this you can be sure that only an authenticated user
can post a request.
Navigation:
[Reply to this message]
|