Posted by ct... on 12/19/06 09:08

Hi Avi,

> This scenario is kinda problematic for me, as the authentication check
> is only performed when the entire request is complete and reached PHP.
> So posting 5MB would result in posting 10MB for an unauthenticated
> user.

How about restricting access to your upload-form to authenticated
users only? Like this you can be sure that only an authenticated user
can post a request.

[Back to original message]