Re: Re: cvs: php-src(PHP_5_2) / php.ini-dist php.ini-recommended

On 12/21/06, Wez Furlong <kingwez@gmail.com> wrote:

When enabling restrictions like this, you need to consider the impact that you'll have on people that previously ran without any memory limit. The goal here is to strike a balance between a fair ballpark amount that won't break most scripts while preventing accidental (or otherwise) runaway memory allocation. 128MB is an example of a fair ballpark number.

Point taken, but do we really want send out the message "we expect the normal php script to take up to 128MB ram" by changing php.ini-recommended? -Hannes

--Wez. On 12/21/06, Hannes Magnusson <hannes.magnusson@gmail.com> wrote: On 12/21/06, Dmitry Stogov <dmitry@zend.com> wrote:

Oh sorry, you probably wasn't in the list. The discussion took place in @security.

What exactly has increasing the default limit by factor of 4 have to do with security?

Now PHP is always compiled with --enable-memory-limit, and this is the reason to increase the default limit.

So it was acceptable limit when you had to enable it but now when its always enabled memory usage has suddenly increased dramatically? -Hannes

Dmitry.

-----Original Message----- From: Pierre [mailto:pierre.php@gmail.com] Sent: Thursday, December 21, 2006 4:16 PM To: Dmitry Stogov Cc: PHP internals Subject: [PHP-DEV] Re: [PHP-CVS] cvs: php-src(PHP_5_2) / php.ini-dist php.ini-recommended Hi Dmitry, On 12/21/06, Dmitry Stogov <dmitry@php.net> wrote:

dmitry          Thu Dec 21 13:05:28 2006 UTC

  Modified files:              (Branch: PHP_5_2)
    /php-src    php.ini-dist php.ini-recommended

Log: Fixed comments

http://cvs.php.net/viewvc.cgi/php-src/php.ini-dist?r1=1.231.2.10.2.14&

r2=1.231.2.10.2.15&diff_format=u Index: php-src/php.ini-dist diff -u php-src/php.ini-dist:1.231.2.10.2.14

php-src/php.ini-dist:1.231.2.10.2.15

--- php-src/php.ini-dist:1.231.2.10.2.14        Thu Dec 21

09:12:42 2006

+++ php-src/php.ini-dist        Thu Dec 21 13:05:27 2006

@@ -254,7 +254,7 @@

 max_execution_time = 30     ; Maximum execution time of

each script, in seconds

 max_input_time = 60    ; Maximum amount of time each

script may spend parsing request data

-memory_limit = 128M      ; Maximum amount of memory a

script may consume (16MB)

+memory_limit = 128M      ; Maximum amount of memory a

script may consume (128MB) By the way, why do we need to increase it again in 5.2 during the RC phase? I'm not really concerned about this change but I know many who will be or will complain. --Pierre -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

-- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

-- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php