diff --git a/html/app.py b/html/app.py index ac97cf3..0f0b6f6 100644 --- a/html/app.py +++ b/html/app.py @@ -315,10 +315,14 @@ def management_update_upload_limit(): if not check_access(session['user_name'], 9): return render_template('errors/error.html', error_message=f"You aren't allowed to access this page") - + + upload_limit = sanitize_string(request.form['upload_limit']) + target_user_name = sanitize_string(request.form['target_user_name']) + if len(upload_limit) > 31 or len(target_user_name) > 100: + return render_template('errors/error.html', error_message=f"Specified parameters are too large") + try: - upload_limit = int(sanitize_string(request.form['upload_limit'])) - target_user_name = sanitize_string(request.form['target_user_name']) + upload_limit = int(upload_limit) except (KeyError, ValueError) as e: return render_template('errors/error.html', error_message=f"Specified upload limit isn't valid")