43

My main issue is that I want to display an custom error page when an uploaded file exceeds allowed size (maxRequestLength in web.config).

When the big file is uploaded an HttpException is thrown before my upload action method in the controller is invoked. This is expected.

I have tried to catch the exception in a custom attribute and also to override OnException in the controller. Why isnt it possible to catch the exception in either the attribute or the OnException method?

Its possible though to catch the exception in Application_Error in global.asax but neither Response.Redirect nor Server.Transfer works for redirecting to the custom error page. Server.Transfer gives the "failed to process child request" error and response.redirect gives the "Http headers already sent" error.

Any ideas?

Thanks in advance!

Marcus

1
  • 3
    Not an answer to your question. I use SWFUpload (swfupload.org) and set a file size limit. This way the client will not be able to even start uploading a file greater than the limit. You set the limit in JavaScript like so: file_size_limit : "20 MB". See doc: demo.swfupload.org/Documentation Commented May 3, 2010 at 15:55

4 Answers 4

62

When running under IIS7 and upwards there is another parameter:

<system.webServer>
  <security>
    <requestFiltering>
      <requestLimits maxAllowedContentLength="10485760" />
    </requestFiltering>
  </security>
</system.webServer>

The default setting is slightly less than 30 MB.

For uploaded files with size between maxRequestLength and maxAllowedContentLength IIS7 will throw an HttpException with HTTP code 500 and message text Maximum request length exceeded. When this exception is thrown, IIS7 kills the connection immediately. So an HttpModule that redirects on this error will only work if the HttpException is handled and cleared (using Server.ClearError()) in Application_Error() in global.asax.cs.

For uploaded files with size bigger than maxAllowedContentLength IIS7 will display a detailed error page with error code 404 and subStatusCode 13. The error page can be found in C:\inetpub\custerr\en-US\404-13.htm

For redirects on this error on IIS7 I recommend redirecting on httpErrors instead. To redirect to a different action set a smaller value for maxAllowedContentLength than maxRequestLength in web.config and also add the following to web.config:

<system.webServer>
  <httpErrors errorMode="Custom" existingResponse="Replace"> 
    <remove statusCode="404" subStatusCode="13" /> 
    <error statusCode="404" subStatusCode="13" prefixLanguageFilePath=""
       path="http://yoursite.com/Error/UploadTooLarge" responseMode="Redirect" /> 
  </httpErrors>
</system.webServer>
Sign up to request clarification or add additional context in comments.

4 Comments

How do you do this with IIS6?
@Jonathan: See this answer stackoverflow.com/questions/2759193/…
An important thing to note is that if you want to avoid having to deal with the HTTP 500 Maximum request length exceeded errors altogether, you should set both maxRequestLength and maxAllowedContentLength to the same size (the former should be expressed in kilobytes while the latter in bytes as explained here). This way there won't be a request whose size falls between the two values, they can only ever be either smaller or larger than the threshold.
responseMode="Redirect" is required for 404.13 error. It simply does not work in ExecuteURL mode.
3

When running on IIS6, I solved it with a HttpModule by handling the BeginRequest and check if httpApplication.Context.Request.Length is larger than maxRequestLength.

To be able to redirect the entire request has to be read before redirecting.

See code example at this link: http://www.velocityreviews.com/forums/t97027-how-to-handle-maximum-request-length-exceeded-exception.html

2 Comments

The negative part of this solution is that the entire request (and file) needs to be read before the redirection can be done.
That's not a bad thing though if that's the only way. What's the alternative? First, is it possible to detect maxRequestLength exceeded errors before the entire request has been read? This event would have to be captured in code, so you can run some preparation code and call Server.Transfer. Second, if you can do something before the entire request is read, and you cancel it somehow, how with the user's web browser respond? Will it think the connection failed?
1

The velocity eviews link was really helpful in solving the issue. As stated, the only drawback was the entire request (and file) needs to be read before the redirection can be done.

But it can be limited to run only when the page where the file upload control is present by being loaded like this

if (HttpContext.Current.Request.Url.ToString().Contains("UploadedPage.aspx") 
{
    //read and process page request
}

Comments

0

You need to make a custom HttpHandler that will do this for you. ASP.NET will automatically kill the connection if the upload size is too large (as you found out).

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.