49020 – Maximum request size not equal in php.ini and 70_mod_php.conf

Bug 49020 - Maximum request size not equal in php.ini and 70_mod_php.conf

Summary: Maximum request size not equal in php.ini and 70_mod_php.conf

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Server (show other bugs)
Hardware:	x86 Linux

Importance:	High minor
Assignee:	PHP Bugs

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2004-04-26 02:44 UTC by Ruben Kerkhof
Modified:	2004-06-18 00:14 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Ruben Kerkhof 2004-04-26 02:44:11 UTC

In 70_mod_php.conf, the maximum size of a request is limited to 524288 bytes. In php.ini it's much larger by default. I think this is not consistent.
When users get into trouble uploading large files, the last place they look in is 70_mod_php.conf.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.



Expected Results:  
Maybe delete the LimitRequestBody directive in 70_mod_php.conf

Comment 1 Andrew Roberts 2004-04-30 16:52:15 UTC

removing the LimitRequestBody directive from apache is a bad idea as it allows attackers to potentially exhaust resources by allowing large transfers of data.

Comment 2 Robin Johnson archtester

2004-06-18 00:14:52 UTC

i've changed 70_mod_php.conf to the same limit as php.ini, 8mb.