How to guarantee file upload won't crash server?

[Steve]

ASP.NET 2.0 - IIS 5.0

I am using the asp.net 2.0 file upload control in my application. Users
can upload files up to 4MB. i.e. I just kept the default. If someone
maliciously tries to upload big files of say 200MB is order to try and
drain server resources and crash the site, will IIS cut him off at 4MB
i.e. only dedicate 4MB of RAM to the upload?

I am basically afraid that users may be able to easily crash the site,
and thinking of what I can do about it codewise.

Steve.

 

[Kevin Spencer]

Hi Steve,

In your web.config file, you can control the maximum size of uploaded files
with the following element:

<httpRuntime maxRequestLength="4096" />

The value is the maximum number of KB allowed, in the example, 4 MB.

--
HTH,

Kevin Spencer
Microsoft MVP
Professional Development Numbskull

Nyuck nyuck nyuck