unlimited post_max_size in php.ini

tajamari · 09-25-2007, 11:00 PM

Hi Guys,

What consequences will happen if I place no limit on the post_max_size parameter in php.ini. My RAM is 2GB.

Thanks,

AdaHacker · 09-26-2007, 06:45 PM

You would open yourself to a denial of service attack. A malicious user could post unreasonably huge amounts of data to your server and exhaust it's resources.

The real question is, why would you want to place no limit on the post size? Were planning to accept 50GB uploads over an HTTP POST? If so, you might want to stop and consider whether that's really such a good idea.