Posted by AviCoh on 12/20/06 01:46

ct... wrote:
> Hi Avi,
>
> > This scenario is kinda problematic for me, as the authentication check
> > is only performed when the entire request is complete and reached PHP.
> > So posting 5MB would result in posting 10MB for an unauthenticated
> > user.
>
> How about restricting access to your upload-form to authenticated
> users only? Like this you can be sure that only an authenticated user
> can post a request.

I do not have an upload-form - I'm building an API that one of its
actions is to upload content (i.e. not the file upload RFC).

Wish it was that easy...
Thx,
Avi

[Back to original message]