Posted by AviCoh on 12/20/06 01:46

ct... wrote:
> Hi Avi,
>
> > This scenario is kinda problematic for me, as the authentication check
> > is only performed when the entire request is complete and reached PHP.
> > So posting 5MB would result in posting 10MB for an unauthenticated
> > user.
>
> How about restricting access to your upload-form to authenticated
> users only? Like this you can be sure that only an authenticated user
> can post a request.

I do not have an upload-form - I'm building an API that one of its
actions is to upload content (i.e. not the file upload RFC).

Wish it was that easy...
Thx,
Avi

• Next in forum: PHP exec() and Zipping Upload file in Windows
• Prev in forum: Re: ERROR: signing the return value of new by reference
• Thread view: Re: reading http request raw data as stream

[Reply to this message]