mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Require minimum 1 MiB upload limit

This commit is contained in:
Robin McCorkell 2015-03-27 23:43:35 +00:00
parent d55b88c043
commit ab991458ad
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/private/files.php
View File

@ -52,6 +52,8 @@ class OC_Files {
const ZIP_FILES = 2; const ZIP_FILES = 2;
const ZIP_DIR = 3; const ZIP_DIR = 3;
const UPLOAD_MIN_LIMIT_BYTES = 1048576; // 1 MiB
/** /**
* @param string $filename * @param string $filename
* @param string $name * @param string $name
@ -246,15 +248,17 @@ class OC_Files {
* @return bool false on failure, size on success * @return bool false on failure, size on success
*/ */
static function setUploadLimit($size) { static function setUploadLimit($size) {
//don't allow user to break his config -- upper boundary //don't allow user to break his config
if ($size > PHP_INT_MAX) { if ($size > PHP_INT_MAX) {
//max size is always 1 byte lower than computerFileSize returns //max size is always 1 byte lower than computerFileSize returns
if ($size > PHP_INT_MAX + 1) if ($size > PHP_INT_MAX + 1)
return false; return false;
$size -= 1; $size -= 1;
} else {
$size = OC_Helper::phpFileSize($size);
} }
if ($size < self::UPLOAD_MIN_LIMIT_BYTES) {
return false;
}
$size = OC_Helper::phpFileSize($size);
//don't allow user to break his config -- broken or malicious size input //don't allow user to break his config -- broken or malicious size input
if (intval($size) === 0) { if (intval($size) === 0) {