From: "Michael C. Libby" <m_libby@...>
Date: 2003-03-07T11:32:44+09:00
Subject: CGI form and upload security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This is probably more of a general CGI.rb question than specifically file 
uploads... but is there a way with the CGI library to limit the size of a 
form input or an uploaded file?

With Perl's CGI.pm there is a $MAX_UPLOAD (IIRC) that you can set, so that 
someone can't just willy-nilly submit 256 page input to a text field or an 
ISO file to a picture gallery... at least not via the forms.

Is this an issue worth worrying about? And is there a way to handle it?

Thanks

 -michael

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+aAX74ClW9KMwqnMRApU/AJoDRr+DsC3KsQH72dK9pD01KkRvpgCfS4G1
/jXsyBPhv3i8id1A2C3rwG4=
=kQ4v
-----END PGP SIGNATURE-----