I’m actually concerned that someone might maliciously upload files and fill up my S3 bucket. It would be great if there was a setting to limit the number of uploads or the total file size per user per day.

To directly answer your topic’s title, [תמונה] Restrict uploads Theme component This is a very small theme component that will remove the upload button from the composer toolbar and disable drag-and-drop uploading for users that are under a specified trust lev…

Max image size KB The maximum image upload size. This must be configured in nginx (client_max_body_size) / apache or proxy as well. Images larger than this and smaller than client_max_body_size will be resized to fit on upload. Max attachment size KB The maximum attachment files upload s…

I want to block malicious users, you know, but the component you recommended can only block regular users. :broken_heart:

It’s not possible to set such a limitation without creating a custom plugin. [תמונה] copymonopoly: I’m actually concerned that someone might maliciously upload files and fill up my S3 bucket. Do you suspect it already happened? Did you notice a sudden increase in uploads used space? If not,…

Maybe it helps to describe your problem more specifically. Which file extensions are allowed on your forum (Authorized extensions site setting)? By default, only images are allowed. Then requiring approval for posts containing images from users with a low trust level could help (Skip review media gr…

There isn’t any at the moment, maybe I’m being too pessimistic. However, as you mentioned, even if it’s a plugin, it can be disabled through safe mode . It seems that the only way to prevent it is through server or S3 bucket settings.

Thank you for your advice. However, if it’s a malicious user, can they disguise other files as image formats? And since there are no restrictions on the number or total size of images, can they still upload images without limit? Also, I still don’t understand whether the files will occupy my S3 buck…

[תמונה] copymonopoly: However, as you mentioned, even if it’s a plugin, it can be disabled through safe mode . Only the front-end functionality of plugins is disabled in safe mode . The backend limitations remain. You can also disable safe mode for users.

[תמונה] copymonopoly: There isn’t any at the moment, maybe I’m being too pessimistic. You can imagine thousands of ways of disrupting any software in which you can add data, so I wouldn’t worry about this imaginary problem and focus my attention on other things :stuck_out_tongue:

[תמונה] copymonopoly: Also, I still don’t understand whether the files will occupy my S3 bucket if they upload successfully but don’t publish a topic. Here’s some documentation regarding that. [תמונה] Cleaning up uploads and purging uploads from S3 Purging S3 uploads Cleaning up orphan an…

איך לחסום את קבוצת TL1 או קבוצות אחרות מלהתייחס לקבצים נלווים בנושאים?

תמיכה

Heliosurge (Dan DeMontmorency) 8 בינואר,‏ 2025,‏ 10:19pm 16

Regarding safe-mode.

נושא		תגובות	צפיות
Why is my upload limit 100mb?It's set to 500mb Support	56	2901	11 באוקטובר,‏ 2023
Limit file uploads by trust level Feature	4	965	1 בינואר,‏ 2019
Can I increase the 1024000 kb limit on attachment? Self-hosting	18	1557	19 באוגוסט,‏ 2021
Limit number of images uploaded by user per day, wil TL multipliers Feature	26	3929	4 באפריל,‏ 2018
More flexible upload options for admin? Feature	6	1178	30 במאי,‏ 2019

איך לחסום את קבוצת TL1 או קבוצות אחרות מלהתייחס לקבצים נלווים בנושאים?

נושאים קשורים