From: Ilia Alshanetsky Date: Thu, 5 Nov 2009 13:29:34 +0000 (+0000) Subject: Make sure that max_file_uploads is set to 20 by-default in all places X-Git-Tag: php-5.2.12RC1~15 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=53952fef26c8022a8509b9f3c3950dddecb1bf11;p=php Make sure that max_file_uploads is set to 20 by-default in all places --- diff --git a/NEWS b/NEWS index 56ce8c2518..57e1e08ef5 100644 --- a/NEWS +++ b/NEWS @@ -4,7 +4,7 @@ PHP NEWS - Updated timezone database to version 2009.17 (2009q). (Derick) - Added "max_file_uploads" INI directive, which can be set to limit the - number of file uploads per-request to 100 by default, to prevent possible + number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. (Ilia) - Fixed unnecessary invokation of setitimer when timeouts have been disabled. diff --git a/php.ini-dist b/php.ini-dist index b7b26d4357..3fe4aa46d6 100644 --- a/php.ini-dist +++ b/php.ini-dist @@ -553,7 +553,7 @@ upload_max_filesize = 2M ; Maximum number of files that can be uploaded via a single request -max_file_uploads = 100 +max_file_uploads = 20 ;;;;;;;;;;;;;;;;;; ; Fopen wrappers ; diff --git a/php.ini-recommended b/php.ini-recommended index c33d93854a..3ac591f00c 100644 --- a/php.ini-recommended +++ b/php.ini-recommended @@ -604,7 +604,7 @@ upload_max_filesize = 2M ; Maximum number of files that can be uploaded via a single request -max_file_uploads = 100 +max_file_uploads = 20 ;;;;;;;;;;;;;;;;;; ; Fopen wrappers ;