r1pexpb / timthumb

Automatically exported from code.google.com/p/timthumb
0 stars 0 forks source link

Maximum sizes allowed? #66

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Hi,
I noticed that I can increase the w= and h= values to insane big numbers,
and I'm affraid this can load the server too much if someone abuses about that.

I tried 1000px, 5000px, 10000px and 20000px, all worked perfectly.

is there any way to limit the maximum image size?

What steps will reproduce the problem?
1.call an image with a big w= and h= values
2.it renders the image with those values
3.it might be a open to abuse since there's no limit

What is the expected output? What do you see instead?
I'd expect a customizable maximum size for the timthumb.php
I can make very very big thumbs! I tried 20000px and it worked... :(

What version of the product are you using? On what operating system?
trunk

Please provide any additional information below.

Original issue reported on code.google.com by info.bli...@gmail.com on 1 Feb 2010 at 11:37

GoogleCodeExporter commented 9 years ago
the question is HOW did you chance the height and width specs?

Original comment by corychu...@gmail.com on 15 May 2010 at 4:31

GoogleCodeExporter commented 9 years ago
changing the w/h numbers in the url:
 "&w=800&h=600" to something else

Original comment by info.bli...@gmail.com on 15 May 2010 at 5:13

GoogleCodeExporter commented 9 years ago
since it's a thumbnail generator I think settings a maximum size is a good 
idea. I shall add this to the todo list.

Original comment by BinaryMoon on 15 Sep 2010 at 4:35

GoogleCodeExporter commented 9 years ago
This has been commited now. The max values can be changed in the defines at the 
top of the script.

Original comment by BinaryMoon on 16 Sep 2010 at 4:05

GoogleCodeExporter commented 9 years ago
Fantastic!
thanks for your prompt action and implementation.

Original comment by info.bli...@gmail.com on 17 Sep 2010 at 4:31