[imp] Session expired when attaching a file

[Michael M Slusarz]

Quoting SSRI <ssri_abo at u-paris2.fr>:

>>>
>>> Why end user doesn't get a warning message ? Usually, web  
>>> applications warns you that the file is too big.
>>
>> This is a PHP limitation.  You will need to bug them for the explanation.
>>
>
> We were thinking about implementing an "uploading too large of files  
> warning" ( that exists for example in Mediawiki :  
> http://www.mediawiki.org/wiki/Manual:$wgUploadSizeWarning )

This won't help.  We already display this kind of error IF the  
uploaded data is between the max upload size and the max post size.

But your issue is that you are trying to upload data larger than the  
max post size.  When using session tokens, there is no way to tell the  
difference in this situation between a large upload that failed or a  
possible session attack so the only solution is to destroy the session.

The solution was already mentioned in this thread - increase the PHP  
max post size option.

michael



___________________________________
Michael Slusarz [slusarz at horde.org]