diff --git a/inc/config.php b/inc/config.php index f0414cda..b2bfa3fe 100644 --- a/inc/config.php +++ b/inc/config.php @@ -40,11 +40,15 @@ define('ERROR_NOMOVE', 'The server failed to handle your upload.'); define('ERROR_FILEEXT', 'Unsupported image format.'); define('ERR_INVALIDIMG','Invalid image.'); + define('ERR_FILSIZE','The file was too large.'); // For resizing, max values define('THUMB_WIDTH', 200); define('THUMB_HEIGHT', 200); + // Maximum image upload size in bytes + define('MAX_FILESIZE', 1048576); // 10MB + define('DIR_IMG', 'src/'); define('DIR_THUMB', 'thumb/'); define('DIR_RES', 'res/'); diff --git a/post.php b/post.php index a4588d63..23eb0453 100644 --- a/post.php +++ b/post.php @@ -74,6 +74,9 @@ $post['filename'] = $_FILES['file']['name']; $post['has_file'] = $OP || !empty($_FILES['file']['tmp_name']); + if($post['has_file'] && $_FILES['file']['size'] > MAX_FILESIZE) + error(ERR_FILSIZE); + $trip = generate_tripcode($post['name']); $post['name'] = utf8tohtml($trip[0]); $post['trip'] = (isset($trip[1])?$trip[1]:'');