269

I have a form that excepts a file upload in ASP.NET. I need to increase the max upload size to above the 4 MB default.

I have found in certain places referencing the below code at msdn.

[ConfigurationPropertyAttribute("maxRequestLength", DefaultValue = )]

None of the references actually describe how to use it, and I have tried several things with no success. I only want to modify this attribute for certain pages that are asking for file upload.

Is this the correct route to take? And how do I use this?

John Saunders
  • 160,644
  • 26
  • 247
  • 397
Eddie
  • 5,050
  • 8
  • 37
  • 46

14 Answers14

445

This setting goes in your web.config file. It affects the entire application, though... I don't think you can set it per page.

<configuration>
  <system.web>
    <httpRuntime maxRequestLength="xxx" />
  </system.web>
</configuration>

"xxx" is in KB. The default is 4096 (= 4 MB).

Philipp M
  • 1,877
  • 7
  • 27
  • 38
Eric Rosenberger
  • 5,079
  • 1
  • 17
  • 6
203

For IIS 7+, as well as adding the httpRuntime maxRequestLength setting you also need to add:

  <system.webServer>
    <security>
      <requestFiltering>
        <requestLimits maxAllowedContentLength="52428800" /> <!--50MB-->
      </requestFiltering>
    </security>
  </system.webServer>

Or in IIS (7):

  • Select the website you want enable to accept large file uploads.
  • In the main window double click 'Request filtering'
  • Select "Edit Feature Settings"
  • Modify the "Maximum allowed content length (bytes)"
tomRedox
  • 28,092
  • 24
  • 117
  • 154
4imble
  • 13,979
  • 15
  • 70
  • 125
90

To increase uploading file's size limit we have two ways

1. IIS6 or lower

By default, in ASP.Net the maximum size of a file to be uploaded to the server is around 4MB. This value can be increased by modifying the maxRequestLength attribute in web.config.

Remember : maxRequestLenght is in KB

Example: if you want to restrict uploads to 15MB, set maxRequestLength to “15360” (15 x 1024).

<system.web>
   <!-- maxRequestLength for asp.net, in KB --> 
   <httpRuntime maxRequestLength="15360" ></httpRuntime> 
</system.web>

2. IIS7 or higher

A slight different way used here to upload files.IIS7 has introduced request filtering module.Which executed before ASP.Net.Means the way pipeline works is that the IIS value(maxAllowedContentLength) checked first then ASP.NET value(maxRequestLength) is checked.The maxAllowedContentLength attribute defaults to 28.61 MB.This value can be increased by modifying both attribute in same web.config.

Remember : maxAllowedContentLength is in bytes

Example : if you want to restrict uploads to 15MB, set maxRequestLength to “15360” and maxAllowedContentLength to "15728640" (15 x 1024 x 1024).

<system.web>
   <!-- maxRequestLength for asp.net, in KB --> 
   <httpRuntime maxRequestLength="15360" ></httpRuntime> 
</system.web>

<system.webServer>              
   <security> 
      <requestFiltering> 
         <!-- maxAllowedContentLength, for IIS, in bytes --> 
         <requestLimits maxAllowedContentLength="15728640" ></requestLimits>
      </requestFiltering> 
   </security>
</system.webServer>

MSDN Reference link : https://msdn.microsoft.com/en-us/library/e1f13641(VS.80).aspx

Malik Khalil
  • 6,454
  • 2
  • 39
  • 33
  • Does adding your given code in Web.config affect IIS (I mean will there be an IIS Reset if I change this value in Web.config). I am specifically asking for IIS 7. – Jimesh Feb 12 '21 at 14:55
  • Yes changing web.config generally forces an app pool reset for that application (Apply to 7+ that I am aware of) – Richard Squires Aug 22 '23 at 15:32
20

I believe this line in the Web.config will set the max upload size:

<system.web>

        <httpRuntime maxRequestLength="600000"/>
</system.web>
Malik Khalil
  • 6,454
  • 2
  • 39
  • 33
ben
  • 3,126
  • 3
  • 37
  • 51
20

for a 2 GB max limit, on your application web.config:

<system.web>
  <compilation debug="true" targetFramework="4.5" />
  <httpRuntime targetFramework="4.5" maxRequestLength="2147483647" executionTimeout="1600" requestLengthDiskThreshold="2147483647" />
</system.web>

<system.webServer>
  <security>
    <requestFiltering>
      <requestLimits maxAllowedContentLength="2147483647" />
    </requestFiltering>
  </security>
</system.webServer>
Uwe Keim
  • 39,551
  • 56
  • 175
  • 291
cangosta
  • 1,174
  • 2
  • 13
  • 27
7

If its windows 2003 / IIS 6.0 then check out AspMaxRequestEntityAllowed = "204800" in the file metabase.xml located in folder C:\windows\system32\inetsrv\

The default value of "204800" (~205Kb) is in my opinion too low for most users. Just change the value to what you think should be max.

If you cant save the file after editing it you have to either stop the ISS-server or enable the server to allow editing of the file:

alt text
(source: itmaskinen.se)

Edit: I did not read the question correct (how to set the maxrequest in webconfig). But this informatin may be of interrest for other people, many people who move their sites from win2000-server to win2003 and had a working upload-function and suddenly got the Request.BinaryRead Failed error will have use of it. So I leave the answer here.

Glorfindel
  • 21,988
  • 13
  • 81
  • 109
Stefan
  • 11,423
  • 8
  • 50
  • 75
6

I've the same problem in a win 2008 IIS server, I've solved the problem adding this configuration in the web.config:

<system.web>
    <httpRuntime executionTimeout="3600" maxRequestLength="102400" 
     appRequestQueueLimit="100" requestValidationMode="2.0"
     requestLengthDiskThreshold="10024000"/>
</system.web>

The requestLengthDiskThreshold by default is 80000 bytes so it's too small for my application. requestLengthDiskThreshold is measured in bytes and maxRequestLength is expressed in Kbytes.

The problem is present if the application is using a System.Web.UI.HtmlControls.HtmlInputFile server component. Increasing the requestLengthDiskThreshold is necessary to solve it.

Philipp M
  • 1,877
  • 7
  • 27
  • 38
Massimo Zerbini
  • 3,125
  • 22
  • 22
  • 1
    According to https://msdn.microsoft.com/en-us/library/e1f13641(v=vs.100).aspx "Specifies the limit for the input stream buffering threshold, in kilobytes. This value should not exceed the maxRequestLength attribute." so it should be at most the same as the request length? – Jeff Jan 20 '16 at 19:31
  • Yes @Jeff, the value of requestLengthDiskThreshold should be smaller than maxRequestLength, but the first is expressed in bytes. If requestLengthDiskThreshold is greater than maxRequestLength a ConfigurationErrorsException should be thrown, so you can test the correct value on your own. See http://forums.asp.net/t/1680176.aspx?httpRuntime+maxRequestLength+vs+requestLengthDiskThreshold+ – Massimo Zerbini Jan 26 '16 at 15:32
6

Max file size can be restricted to a single MVC Controller or even to an Action.
web.config <location> tag can be used for this:

<location path="YourAreaName/YourControllerName>/YourActionName>">
  <system.web>
    <!-- 15MB maxRequestLength for asp.net, in KB 15360 -->
    <httpRuntime maxRequestLength="15360" />
  </system.web>
  <system.webServer>
    <security>
      <requestFiltering>
        <!-- 15MB maxAllowedContentLength, for IIS, in bytes 15728640 -->
        <requestLimits maxAllowedContentLength="15728640" />
      </requestFiltering>
    </security>
  </system.webServer>
</location>

Or you can add these entries in area's own web.config.

Martin
  • 145
  • 2
  • 3
  • This should be higher and used instead of the accepted answer, since this is more secure for validating request size. – David Ortega Jul 03 '19 at 19:48
5

I know it is an old question.

So this is what you have to do:

In you web.config file, add this in <system.web>:

<!-- 3GB Files / in kilobyte (3072*1024) -->
<httpRuntime targetFramework="4.5" maxRequestLength="3145728"/>

and this under <system.webServer>:

<security>
    <requestFiltering>

      <!-- 3GB Files / in byte (3072*1024*1024) -->
      <requestLimits maxAllowedContentLength="3221225472" />

    </requestFiltering>
</security>

You see in the comment how this works. In one you need to have the sie in bytes and in the other one in kilobytes. Hope that helps.

Uwe Keim
  • 39,551
  • 56
  • 175
  • 291
damir
  • 1,928
  • 1
  • 16
  • 26
4

If you are using Framework 4.6

<httpRuntime targetFramework="4.6.1" requestValidationMode="2.0" maxRequestLength="10485760"  />
mbadeveloper
  • 1,272
  • 9
  • 16
2

You can write that block of code in your application web.config file.

<httpRuntime maxRequestLength="2048576000" />
<sessionState timeout="3600"  />

By writing that code you can upload a larger file than now

0

I have a blog post on how to increase the file size for asp upload control.

From the post:

By default, the FileUpload control allows a maximum of 4MB file to be uploaded and the execution timeout is 110 seconds. These properties can be changed from within the web.config file’s httpRuntime section. The maxRequestLength property determines the maximum file size that can be uploaded. The executionTimeout property determines the maximum time for execution.

skzi
  • 340
  • 3
  • 14
0

If it works in your local machine and does not work after deployment in IIS (i used Windows Server 2008 R2) i have a solution.

Open IIS (inetmgr) Go to your website At right hand side go to Content (Request Filtering) Go to Edit Feature Settings Change maximum content size as (Bytes you required) This will work. You can also take help from following thread http://www.iis.net/configreference/system.webserver/security/requestfiltering/requestlimits

Rahat Ali
  • 1
  • 1
0

If you use sharepoint you should configure max size with Administrative Tools too: kb925083

Quiz
  • 514
  • 1
  • 7
  • 13