can anobody help me edit this code to block uploads bigger than 8M

[PHP]<?php
if(!isset($_POST['upload'])) {
?>
<form name="upload" enctype="multipart/form-data" method="POST" action="<?php echo $_SERVER['PHP_SELF']; ?>">
<input type="file" name="file" size="13" value="">
<br /><input type="submit" name="upload" value="Upload">
</form>
<?php
} else {
$uploaddir = '/home/xboxlead/public_html/nav/upload/temp/';
$filename = $_FILES['file']['name'];
$tmpname_file = $_FILES['file']['tmp_name'];
$date_file = date(imdy);
move_uploaded_file($tmpname_file, "$uploaddir$date_file$filename");
echo "Successful";
}
?>[/PHP]

This if statment should catch any files larger than 8MB

PHP Code:

if(filesize($filename) > 8388608)
{
    //do something here
} 


Edit your php configuration, there should be an upload limit in there.

i do have an upload limit there, i buy hosting and they have it set at 8.

what happens is when i try to upload more than 8M, the page refreshes after some of it uploads instead of saying that the file is too big, is it possible to have the size checked before the actual upload process begins?

thanks in advance!

$limit_size = 8388608;
$file_size=$HTTP_POST_FILES['form_file_id_name']['size'];
f($file_size >= $limit_size){
echo "Your file size is over limit<BR>";
echo "Your file size = ".$file_size;
echo " K";
echo "<BR>File size limit = 8MB";
}
else {

#continue_uploading_code_here

}

change the form_file_id_name to the id/name from your form.

Originally Posted by rion

$limit_size = 8388608;
$file_size=$HTTP_POST_FILES['form_file_id_name']['size'];
f($file_size >= $limit_size){
echo "Your file size is over limit<BR>";
echo "Your file size = ".$file_size;
echo " K";
echo "<BR>File size limit = 8MB";
}
else {

#continue_uploading_code_here

}

change the form_file_id_name to the id/name from your form.

Parse error: parse error, unexpected '{' on line 19 [ f($file_size >= $limit_size){ ]

ok i fixed the error,i changed the f to if, but the script is still trying to upload the file before displayin the error

sorry about that typo....ok....looks like you are going to need to use some javascript to check the filesize...let me find something and i'll post again shortly

ok apparently it's not possible to do using javascript either. The only thing I can think of is to use an output buffer during the upload. Or limit the size to less than your hosts limit of 8MB. Set it to 7.5 maybe and see if it dies.

If you don't have
<input type="hidden" name="MAX_FILE_SIZE" value="30000" />
put that before the file input element.

While I'm at it I'll just post the php.net page related to handling uploaded files.

http://www.php.net/manual/en/features.file-upload.php
I hope this helps.

PHP Manual, Chapter 18. Handling file uploads
Error Messages Explained
"Since PHP 4.2.0, PHP returns an appropriate error code along with the file array. The error code can be found in the ['error'] segment of the file array that is created during the file upload by PHP. In otherwords, the error might be found in $_FILES['userfile']['error'].
...
UPLOAD_ERR_INI_SIZE
Value: 1; The uploaded file exceeds the upload_max_filesize directive in php.ini.
..."

This means that you can easily detect in your script whether the uploaded file exceeded the filesize allowed in php.ini.

if (!empty($_FILES) && $_FILES['myfile']['error'] == 1) {
   // do something to tell user that a file is too large
}
else {
   // do anything else
}