And besides - it's on client side anyway so anyone can mess with it. Then it tells us that it is merely for convenience. Say what? First it tells that it must precede the file upload field. The PHP settings (on the server side) for maximum-size, however, cannot be fooled. It is merely a convenience feature for users on the client side of the application. Keep in mind: fooling this setting on the browser side is quite easy, so never rely on files with a greater size being blocked by this feature. This form element should always be used as it saves users the trouble of waiting for a big file being transferred only to find that it was too large and the transfer failed. The MAX_FILE_SIZE hidden field (measured in bytes) must precede the file input field, and its value is the maximum filesize accepted by PHP. I was trying to make a file upload form and checked the PHP documentation to refresh my memory on the subject.
0 kommentar(er)
