Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:118592
MIME-Version: 1.0
References: <CABiw4UhL6NTD+iPPY=9qwN5-bKABkLxgrPDA2awO171Txi1-eQ@mail.gmail.com>
In-Reply-To: <CABiw4UhL6NTD+iPPY=9qwN5-bKABkLxgrPDA2awO171Txi1-eQ@mail.gmail.com>
Date: Sat, 10 Sep 2022 18:31:20 +0900
Message-ID: <CAGa2bXZa-3sEQf1LSEfOWMd85R-FZo5HbLb1vw8a-2v+s1Wu=A@mail.gmail.com>
To: Misha <mishanon@gmail.com>
Cc: internals@lists.php.net
Content-Type: multipart/alternative; boundary="0000000000007af8eb05e84f5562"
Subject: Re: [PHP-DEV] Increase maximum size of an uploaded file to 50Mbyte
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--0000000000007af8eb05e84f5562
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

2022=E5=B9=B49=E6=9C=887=E6=97=A5(=E6=B0=B4) 22:58 Misha <mishanon@gmail.co=
m>:

> Hello everyone,
>
> We spend a lot of time to increase limits for uploads file in PHP. Can we
> increase it in php.ini?
>
> Current value is 2Mb. Its so small value, when photo image can take 8Mb o=
n
> iPhone X.
> We should increase it to 50Mb, because DevOps engineers do useless work
> trying to change it.
>
> I have prepared PR for it https://github.com/php/php-src/pull/9315
>
> Take a look and approve it please.
>
> Thanks!
>
> --
> Best regards, Michail
>


I can understand the motivation, but I am against the change.

To increase uploaded file max size, POST max size must be increased too.
For 99.99% entry points do not need 50MB POST max size.
and larger POST max size increases DoS risks.

Default upload file max size and POST max size should be small enough value
for better security.
IMHO, PHP script that handles large POST data should increase these
settings.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--0000000000007af8eb05e84f5562--