From d7dccfd2999b8c193db701e2e7d717db7580ed23 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 13 May 2020 09:25:30 +0200
Subject: [PATCH] check against maxuploadsize when uploading a new document

---
 op/op.Ajax.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/op/op.Ajax.php b/op/op.Ajax.php
index 1510f3f06..5b798ffa5 100644
--- a/op/op.Ajax.php
+++ b/op/op.Ajax.php
@@ -660,6 +660,13 @@ switch($command) {
 					exit;
 				} 
 
+				$maxuploadsize = SeedDMS_Core_File::parse_filesize($settings->_maxUploadSize);
+				if ($maxuploadsize && $_FILES["userfile"]["size"] > $maxuploadsize) {
+					header('Content-Type: application/json');
+					echo json_encode(array('success'=>false, 'message'=>getMLText("uploading_maxsize")));
+					exit;
+				}
+
 				$userfiletmp = $_FILES["userfile"]["tmp_name"];
 				$userfiletype = $_FILES["userfile"]["type"];
 				$userfilename = $_FILES["userfile"]["name"];