Does your artifact manager get in the way? Join us on Oct. 8 at 10am PT, to discuss how npm can help.Sign up »


1.1.6-alpha.5 • Public • Published


Simple express middleware for uploading files.

npm Build Status downloads per month Coverage Status

Version 1.1.1 Breaking Changes

Breaking change to md5 handling:

  • md5 value contains md5 hash instead of a function to compute it.
  • md5 now can be used with useTempFiles: true.

Version 1.0.0 Breaking Changes

Breaking change to md5 handling. Read about it here.


# With NPM 
npm install --save express-fileupload
# With Yarn 
yarn add express-fileupload


When you upload a file, the file will be accessible from req.files.


  • You're uploading a file called car.jpg
  • Your input's name field is foo: <input name="foo" type="file" />
  • In your express server request, you can access your uploaded file from'/upload', function(req, res) {
  console.log(; // the uploaded file object

The object will contain the following:

  • "car.jpg"
  • A function to move the file elsewhere on your server
  • The mimetype of your file
  • A buffer representation of your file, returns empty buffer in case useTempFiles option was set to true.
  • A path to the temporary file in case useTempFiles option was set to true.
  • A boolean that represents if the file is over the size limit
  • Uploaded size in bytes
  • MD5 checksum of the uploaded file


Using Busboy Options

Pass in Busboy options directly to the express-fileupload middleware. Check out the Busboy documentation here.

  limits: { fileSize: 50 * 1024 * 1024 },

Using useTempFile Options

Use temp files instead of memory for managing the upload process.

    useTempFiles : true,
    tempFileDir : '/tmp/'

Available Options

Pass in non-Busboy options directly to the middleware. These are express-fileupload specific options.

Option Acceptable Values Details
  • false (default)
  • true
Automatically creates the directory path specified in .mv(filePathName)
  • false (default)
  • true
Applies uri decoding to file names if set true.
  • false (default)
  • true
  • regex
Strips characters from the upload's filename. You can use custom regex to determine what to strip. If set to true, non-alphanumeric characters except dashes and underscores will be stripped. This option is off by default.

Example #1 (strip slashes from file names): app.use(fileUpload({ safeFileNames: /\\/g }))
Example #2: app.use(fileUpload({ safeFileNames: true }))
  • false (default)
  • true
  • Number
Preserves filename extension when using safeFileNames option. If set to true, will default to an extension length of 3. If set to Number, this will be the max allowable extension length. If an extension is smaller than the extension length, it remains untouched. If the extension is longer, it is shifted.

Example #1 (true):
app.use(fileUpload({ safeFileNames: true, preserveExtension: true }));
myFileName.ext --> myFileName.ext

Example #2 (max extension length 2, extension shifted):
app.use(fileUpload({ safeFileNames: true, preserveExtension: 2 }));
myFileName.ext --> myFileNamee.xt
  • false (default)
  • true
Returns a HTTP 413 when the file is bigger than the size limit if true. Otherwise, it will add a truncated = true to the resulting file structure.
  • 'File size limit has been reached' (default)
  • String
Response which will be send to client if file size limit exceeded when abortOnLimit set to true.
  • false (default)
  • function(req, res, next)
User defined limit handler which will be invoked if the file is bigger than configured limits.
  • false (default)
  • true
Will use temporary files at the specified tempDir for managing uploads rather than using buffers in memory. This avoids memory issues when uploading large files.
  • String (path)
Used with the useTempFiles option. Path to the directory where temp files will be stored during the upload process. Feel free to add trailing slash, but it is not necessary.
  • false (default)
  • true
By default, req.body and req.files are flattened like this: {'name': 'John', 'hobbies[0]': 'Cinema', 'hobbies[1]': 'Bike'}

When this option is enabled they are parsed in order to be nested like this: {'name': 'John', 'hobbies': ['Cinema', 'Bike']}
  • false (default)
  • true
Turn on/off upload process logging. Can be usefull for troubleshooting.

Help Wanted

Looking for additional maintainers. Please contact richardgirges [ at ] if you're interested. Pull Requests are welcomed!

Thanks & Credit

Brian White for his stellar work on the Busboy Package and the connect-busboy Package


npm i express-fileupload

Downloadsweekly downloads









last publish


  • avatar
Report a vulnerability