diff --git a/html/app.py b/html/app.py
index ac97cf3..0f0b6f6 100644
--- a/html/app.py
+++ b/html/app.py
@@ -315,10 +315,14 @@ def management_update_upload_limit():
if not check_access(session['user_name'], 9):
return render_template('errors/error.html', error_message=f"You aren't allowed to access this page")
-
+
+ upload_limit = sanitize_string(request.form['upload_limit'])
+ target_user_name = sanitize_string(request.form['target_user_name'])
+ if len(upload_limit) > 31 or len(target_user_name) > 100:
+ return render_template('errors/error.html', error_message=f"Specified parameters are too large")
+
try:
- upload_limit = int(sanitize_string(request.form['upload_limit']))
- target_user_name = sanitize_string(request.form['target_user_name'])
+ upload_limit = int(upload_limit)
except (KeyError, ValueError) as e:
return render_template('errors/error.html', error_message=f"Specified upload limit isn't valid")