File Upload Large Files PHP/AJAX

views:

answers:

+2 Q:

File Upload Large Files PHP/AJAX

Hi There,

Im trying to find some software to help me upload really large files (>200mb). I only want to upload a single file, no multi-options. Also i would like a simple progress bar if possible.

I have come across http://pixeline.be/experiments/jqUploader/ which is literally what i need but it has a limit of 100mb per file, because it uses flash.

Does anyone know of something else thats similar to this, but can handle larger files?

thx

Perhaps http://www.uploadify.com

jakenoble 2010-08-25 01:45:50

Thx for that :). Since it (and other similar tools out there) simply uses the html 'file' input type to render and upload files.. do you think having to change the php upload limits would create security holes?

ParampalP 2010-08-25 02:35:20

Of course. Someone could eat up your bandwidth easily. But your considering security holes now before developing which is good. You can therefore do you best to fill those holes early rather than later.

jakenoble 2010-08-25 02:41:25

Another popular solution is http://www.swfupload.org/, but I guess it may suffer from the 100MB limit.

Regarding the whole issue of large file sizes, from my research it seems that in order to upload large files there is no other option than to increase the values for upload_max_filesize, post_max_size and max_execution time. I just wonder what the security implications are of having post_max_size set to, say, 500M? Its not the issue of bandwidth that concerns me - it is the possible DoS attacks that might arise from allowing attackers to send random 500M POST requests to the server. The best workaround I can think for this issue is to send uploads to a different server.

There is a good discussion of the whole issue here:

http://aaronwinborn.com/blogs/aaron/how-handle-large-file-uploads

If any Apache hackers out there can shed any light on the security implications of having a really large value for post_max_size that would be great.

JamesG 2010-08-25 03:12:00

Apache itself doesn't really care how big the files are, modulo things like 31/32bit limits (2.1/4.2gig). But if you have a very large post limit, it is possible to tie up all available children in the connection pool with long-lived uploads and DOS the machine (as well as exhaust disk space). This is harder to do with smaller limits as the uploads will complete quicker and recycle connections faster. Of course, you can just totally slam the server with connection attempts anyways.

Marc B 2010-08-25 03:57:10

ansaurus

tags:

views:

answers:

File Upload Large Files PHP/AJAX

related questions