Re: able to upload 28 meg file, yet php.ini limits posts to 10 megs. What is up with that?

NC wrote:
On May 30, 7:01 pm, Lawrence Krubner <lawre...@xxxxxxxxxxx> wrote:
To guard against our users possibly uploading huge files, I've
got this in my php.ini file:

; Maximum size of POST data that PHP will accept.
post_max_size = 10M

What about upload_max_filesize?


From my php.ini file:

; Maximum allowed size for uploaded files.
upload_max_filesize = 10M




And what, if anything, is
LimitRequestBody directive in Apache set to?

This returns nothing:

root@ldc310:~# cd /etc/apache2/
root@ldc310:/etc/apache2# grep -R LimitRequestBody *

So I assume it is not set.



Are there any .htaccess
files that could possibly change any of this?

No, not at the top level of the site, where the upload script is.




And while we're checking for possibilities, are you editing the same
php.ini PHP is using?

I assume, but how could I be sure? This tells me the version:

root@ldc310:/var/www/vhosts/thesecondroad.org/httpdocs# php -v
PHP 5.1.6 (cli) (built: Nov 28 2007 22:52:49)

Since it is PHP version 5, I assume this is the right path for editing:

root@ldc310:/# nano /etc/php5/cli/php.ini

Any way I can be sure? How do I check?


Also, are you running PHP as an Apache module or CGI/FastCGI?

An Apache module.

-- lawrence





.

Relevant Pages

  • Re: able to upload 28 meg file, yet php.ini limits posts to 10 megs. What is up with that?
    ... To guard against our users possibly uploading huge files, ... Maximum size of POST data that PHP will accept. ... LimitRequestBody directive in Apache set to? ...
    (comp.lang.php)
  • Re: Problem installing PHP 4 with Apache
    ... (shows all configuration etc.), then you allready have your apache set up to work with PHP. ...
    (alt.php)
  • Re: How to Reload a Form without Getting Warning Dialog
    ... > a better way to do this using more PHP code...... ... > the parent window, ... > parent window when working with POST data without getting this dialog? ... > POST DATA into a GET URL string. ...
    (comp.lang.php)
  • 90% of programs made in PHP5 and prior Full Path Disclosure vuln.
    ... This may be a hard step, if the RPD is the only bug in that server, but PHP programs have functions that unexpectedly can return lots of errors. ... Normally a Full Path Disclosure is not dangerous, but in this case the 90% of the programs written in PHP are vulnerable. ... -vBulletin - Affected (POST Data) ... This error also appears when calling with no value (that also bypass filters). ...
    (Bugtraq)
  • Re: [PHP] PHP & MySQL Problem
    ... [PHP] PHP & MySQL Problem ... query to search a database. ... It's a ridiculously high limit however, so it seems more likely that ... And estimate for us the size of the POST data as well. ...
    (php.general)