Best way to make sure the user dont upload images more than 1MB in size.

Question

I am using ASP.net with VB.NET. Is there some Validator that i can use that will check the size of the uploaded image? Else what must i do in code to make sure that the user do not upload images more than 1MB?

Thanks in advanced

p.s C# code will also do, i can use a converter to VB.NET

EDIT

For some reason when i change the maxRequestLength to 1024 (in my WEB.config) and i upload a image with size 1.25mb then i get the Microsoft Error page saying "Internet Explorer cannot display the webpage"......... And i do have a Try Catch block inside my Submit button.....If i remove the maxRequestLength from my Web.config then it works fine......................

Answer 1

You can use the following code to determine the size [in KB] of the uploaded file and once you know the size you can easily decide if you want to proceed further with the file or reject the upload.

Request.Files(0).ContentLength / 1024

Answer 2

This is ultimately handled in Web.config. Look for the httpRuntime section:

<httpRuntime 
 executionTimeout="110" 
 maxRequestLength="4096" 
/>

There are many other settings in httpRuntime but these are the two that are relevant. Here, the maxRequestLength is set to 4096, or 4KB (the number is in bytes). So, set this value accordingly. Also, you will want to set the executionTimeout accordingly as well so it gives a reasonable amount of time to upload whatever you max upload is.

Answer 3

The cannot display web page error occurs because ASP.NET breaks the connection for oversized requests to mitigate DOS attacks based on oversized requests. To get around this, you'd have to do the upload in a iframe and then detect whether an error occurred or not. You could also use a flash, silverlight, java, or activex uploader component installed on the client to validate the file size client side, but that will require installation depending on your solution.

plug

I'm the author of SlickUpload, an ASP.NET upload component that solves this issue, among others. You can set the maxRequestLength in the web.config to the max value you want, and SlickUpload will manage doing the upload out of bounds, validating it, and returning useful error messages to the browser. Check it out and let me know if you have any questions.