Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-84469

In account settings - User Info - "Upload Image" there is a limit to upload only 300kb of file size but this can be bypassed

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: Duplicate
    • Affects Version/s: 7.0.5 CE GA6
    • Fix Version/s: None
    • Labels:
      None

      Description

      Hi,

      In account settings - User Info - "Upload Image" there is a limit to upload only 300kb of file size but this can be bypassed. The parameter used to verify file size is in the post request - com*_liferay_image_uploader_web_portlet_ImageUploaderPortlet_maxFileSize*=30720 (default value). If you increase it to 3kb or so, it will let you upload a bigger file.

      The uploaded file sits on the server in this temporary location - _com_liferay_image_uploader_web_portlet_ImageUploaderPortlet_tempImageFileName

      File location -

      https://hostname/group/control_panel/manage?p_p_id=com_liferay_image_uploader_web_portlet_ImageUploaderPortlet&p_p_lifecycle=2&p_p_state=pop_up&p_p_mode=view&p_p_resource_id=%2Fimage_uploader%2Fview&p_p_cacheability=cacheLevelPage&_com_liferay_image_uploader_web_portlet_ImageUploaderPortlet_mvcRenderCommandName=*%2Fimage_uploader%2Fview*&_com_liferay_image_uploader_web_portlet_ImageUploaderPortlet_cmd=get_temp&p_p_auth=token1&*_com_liferay_image_uploader_web_portlet_ImageUploaderPortlet_tempImageFileName=filename.jpg*

       

      However, please note the "Save" request eventually fails on the user information page, so the image is actually not Saved permanently on the server. But still a bigger image gets uploaded on to the server which eventually can be misused to upload huge file sizes on server and eating up space on the server.

      Please let me know if you need more information.

        Attachments

          Activity

            People

            • Assignee:
              harry.chai Harry Chai
              Reporter:
              shreyasr6280 Shreyas R
              Participants of an Issue:
              Recent user:
              Harry Chai
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                47 weeks ago

                Packages

                Version Package