On Tue, Oct 15, 2002 at 06:33:33PM +0200, Markus Fischer wrote:
> On Tue, Oct 15, 2002 at 06:23:17PM +0200, Tom Sommer wrote : 
> > Andrei Zmievski wrote:
> > >Summary: max_execution_time affects large uploads
> > >URL:     http://bugs.php.net/bug.php?id=16880

[...]
>     I neither think this is critical nor a real problem. Thank
>     god a big/long file upload is captured by the time limit,
>     else we would have another DoS.

I think long time uploads should be allowed.
On slow network links, there are people that can download
10MB mailbox even for 30 minutes.

TIP: Maybe user/admin can set time limit to 2 minutes,
and CPU usage to 10 seconds. On unix platform there is
a pretty good function called setrlimit() but it can
limit CPU usage per process only, not per Apache request.
But it should be possible to check every 'x' seconds
user/system CPU usage with getrlimit() ...
This would be even better anti-DOS feature,
since some user php scripts with bugs could run
at 100% CPU for (20 seconds max_execution_time is loo long
for such scripts, and too short for others).

Best regards,

-- 
Piotr Klaban

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to