Re: Re: [4.3] Current critical bugs

On Tue, Oct 15, 2002 at 06:33:33PM +0200, Markus Fischer wrote: > On Tue, Oct 15, 2002 at 06:23:17PM +0200, Tom Sommer wrote : > > Andrei Zmievski wrote: > > >Summary: max_execution_time affects large uploads > > >URL: http://bugs.php.net/bug.php?id=16880 [...] > I neither think this is critical nor a real problem. Thank > god a big/long file upload is captured by the time limit, > else we would have another DoS. I think long time uploads should be allowed. On slow network links, there are people that can download 10MB mailbox even for 30 minutes. TIP: Maybe user/admin can set time limit to 2 minutes, and CPU usage to 10 seconds. On unix platform there is a pretty good function called setrlimit() but it can limit CPU usage per process only, not per Apache request. But it should be possible to check every 'x' seconds user/system CPU usage with getrlimit() ... This would be even better anti-DOS feature, since some user php scripts with bugs could run at 100% CPU for (20 seconds max_execution_time is loo long for such scripts, and too short for others). Best regards, -- Piotr Klaban