From 53952fef26c8022a8509b9f3c3950dddecb1bf11 Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Thu, 5 Nov 2009 13:29:34 +0000 Subject: [PATCH] Make sure that max_file_uploads is set to 20 by-default in all places --- NEWS | 2 +- php.ini-dist | 2 +- php.ini-recommended | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/NEWS b/NEWS index 56ce8c2518..57e1e08ef5 100644 --- a/NEWS +++ b/NEWS @@ -4,7 +4,7 @@ PHP NEWS - Updated timezone database to version 2009.17 (2009q). (Derick) - Added "max_file_uploads" INI directive, which can be set to limit the - number of file uploads per-request to 100 by default, to prevent possible + number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. (Ilia) - Fixed unnecessary invokation of setitimer when timeouts have been disabled. diff --git a/php.ini-dist b/php.ini-dist index b7b26d4357..3fe4aa46d6 100644 --- a/php.ini-dist +++ b/php.ini-dist @@ -553,7 +553,7 @@ upload_max_filesize = 2M ; Maximum number of files that can be uploaded via a single request -max_file_uploads = 100 +max_file_uploads = 20 ;;;;;;;;;;;;;;;;;; ; Fopen wrappers ; diff --git a/php.ini-recommended b/php.ini-recommended index c33d93854a..3ac591f00c 100644 --- a/php.ini-recommended +++ b/php.ini-recommended @@ -604,7 +604,7 @@ upload_max_filesize = 2M ; Maximum number of files that can be uploaded via a single request -max_file_uploads = 100 +max_file_uploads = 20 ;;;;;;;;;;;;;;;;;; ; Fopen wrappers ; -- 2.40.0