# Serious problem with File Column plugin. Help!

**URL:** <https://www.ruby-forum.com/t/serious-problem-with-file-column-plugin-help/89548>\
**Category:** Rails\
**Created:** [March 21, 2007, 4:45am UTC](https://www.ruby-forum.com/t/serious-problem-with-file-column-plugin-help/89548 "2007-03-21T04:45:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![DLR](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/8e7dd6/32.png) [@DLR](https://www.ruby-forum.com/u/DLR)\
**Post date:** [March 21, 2007, 4:45am UTC](https://www.ruby-forum.com/t/serious-problem-with-file-column-plugin-help/89548/1 "2007-03-21T04:45:30Z")

</div>

Development environment: WinXP, ruby 1.8.5, rails 1.2.3

Hey guys,

I’m implementing a file upload feature to my application.

new.rhtml:

\<% form\_tag( { :action =\> ‘create’ }, :multipart =\> true ) do |f| %\>  
\<%= render :partial =\> ‘form’, :object =\> f %\>  
\<%= submit\_tag “Create” %\>  
\<% end %\>

in \_form partial:

Profile image  
\<%= file\_column\_field 'foobaar', "profile\_image" %\>

in my Foobar model:

file\_column :profile\_image, :magick =\> {  
:versions =\> { “tiny” =\> “50x50”,  
“thumb” =\> “200x150”, “medium” =\> “640x480\>” }  
}  
validates\_file\_format\_of :profile\_image, :in =\> [“gif”, “png”, “jpg”]  
validates\_filesize\_of :profile\_image, :in =\>  
15.kilobytes…200.kilobytes  
validates\_image\_size :profile\_image, :min =\> “200x150”

in my controller:

def create  
@foobar = Foobar.new(params[:foobar])  
@foobar.user\_id = current\_user.id  
if @foobar.save  
flash[:notice] = ‘Profile was successfully created.’  
redirect\_to :action =\> ‘list’  
else  
render :action =\> ‘new’  
end  
end

Ok so here is the problem. Everything seems to be going well until I  
discovered that File Column is uploading the image to a “tmp” folder  
before verifying the  
content. Is this correct?

I wanted to test any vulnerabilities this may have on the app and  
decided to upload a 400Mb zip file. This pretty much killed my app and  
cpu and memory usage just maxed out and stayed there. I had to stop and  
shut down the browser to get functionality back.

Is this a known issue with File Column or am I doing something wrong  
here? Thanks in advance for any input you may be able to give me.