I am having trouble getting ASP upload to stop users uploading large photos.

I've set the limits to 120 pixels as shown in the tutorial - but often they manage to upload really big photos without being stopped...

Is there something I am missing here?