Added a maximum filesize for image uploads

2 files changed, 7 insertions, 0 deletions

diff --git a/inc/config.php b/inc/config.php
index f0414cda..b2bfa3fe 100644
--- a/inc/config.php
+++ b/inc/config.php
@@ -40,11 +40,15 @@
 	define('ERROR_NOMOVE',	'The server failed to handle your upload.');
 	define('ERROR_FILEEXT',	'Unsupported image format.');
 	define('ERR_INVALIDIMG','Invalid image.');
+	define('ERR_FILSIZE','The file was too large.');
 	
 	// For resizing, max values
 	define('THUMB_WIDTH',	200);
 	define('THUMB_HEIGHT',	200);
 	
+	// Maximum image upload size in bytes
+	define('MAX_FILESIZE',	1048576); // 10MB
+	
 	define('DIR_IMG',		'src/');
 	define('DIR_THUMB',		'thumb/');
 	define('DIR_RES',		'res/');
diff --git a/post.php b/post.php
index a4588d63..23eb0453 100644
--- a/post.php
+++ b/post.php
@@ -74,6 +74,9 @@
 		$post['filename'] = $_FILES['file']['name'];

 		$post['has_file'] = $OP || !empty($_FILES['file']['tmp_name']);

 		

+		if($post['has_file'] && $_FILES['file']['size'] > MAX_FILESIZE)

+			error(ERR_FILSIZE);

+		

 		$trip = generate_tripcode($post['name']);

 		$post['name'] = utf8tohtml($trip[0]);

 		$post['trip'] = (isset($trip[1])?$trip[1]:'');