This is a migrated thread and some comments may be shown as answers.

Rad Async Upload security issue for big file sizes

1 Answer 91 Views
AsyncUpload
This is a migrated thread and some comments may be shown as answers.
Deepak
Top achievements
Rank 1
Deepak asked on 04 May 2011, 06:52 AM
Hi,
    We were able to upload big file sizes by setting

<security><requestFiltering><requestLimits maxAllowedContentLength="419440400"/></requestFiltering></security>

this in Telerik.Web.UI.WebResource.axd .
I would like to know whether its safe to do this, Is there any possibility of DOS attacks, or is there a safer way to do this?

Thanks,
Deepak M

1 Answer, 1 is accepted

Sort by
0
Genady Sergeev
Telerik team
answered on 06 May 2011, 12:13 PM
Hello Deepak,

This is the standard mechanism for uploading large files within IIS, so by assumption it is considered safe. There is a way to avoid setting large value to maxallowedfilesize however, the way around is to use RadAsyncUpload and its Silverlight module, which will chunkenize the file to be uploaded into many chunks, each of which 2 mb large. Thus way it can bypass the IIS integrated request size limitations.

Regards,
Genady Sergeev
the Telerik team

Browse the vast support resources we have to jump start your development with RadControls for ASP.NET AJAX. See how to integrate our AJAX controls seamlessly in SharePoint 2007/2010 visiting our common SharePoint portal.

Tags
AsyncUpload
Asked by
Deepak
Top achievements
Rank 1
Answers by
Genady Sergeev
Telerik team
Share this question
or