limit UPLOAD files to 1KB from APACHE, NOT from scripts

000

• February 21, 2022 16:21

hello, why when we config the file /etc/apache2/conf/httpd.conf in cPanel with the options LimitRequestBody 1024 # file MAX 1KB
or directlly with the string: LimitRequestBody 1024 # file MAX 1KB
users can UPLOAD files with more of 1KB ? we wait the result from OTHERS servers with Apache: we need config this directlly from Apache, not from SCRIPT. thanks

• 

  000

  • February 23, 2022 18:54

  ... Could you open a ticket with our support team so we can check this out?

  
  94419585

  0
• 

  quietFinn

  • February 23, 2022 19:05

  It's not even possible to edit the httpd.conf file directly, as it says in top of httpd.conf : # Direct modifications to the Apache configuration file WILL be lost upon subsequent # regeneration of this configuration file, or an Apache update. # # To have your modifications retained, you should create/edit administrator-specific # include files: # # /etc/apache2/conf.d/includes/pre_main_global.conf # /etc/apache2/conf.d/includes/pre_virtualhost_global.conf # /etc/apache2/conf.d/includes/post_virtualhost_global.conf
  That can be done also in WHM as @Spirogg told.

  0
• 

  000

  • February 23, 2022 19:38

  It's not even possible to edit the httpd.conf file directly, as it says in top of httpd.conf : # Direct modifications to the Apache configuration file WILL be lost upon subsequent # regeneration of this configuration file, or an Apache update. # # To have your modifications retained, you should create/edit administrator-specific # include files: # # /etc/apache2/conf.d/includes/pre_main_global.conf # /etc/apache2/conf.d/includes/pre_virtualhost_global.conf # /etc/apache2/conf.d/includes/post_virtualhost_global.conf
  That can be done also in WHM as @Spirogg told.

  
  thanks master @quietFinn me too comment: AFTER of restart Apache and complet server with all continue identic, this changes not work ( )

  0
• 

  cPRex Jurassic Moderator

  • February 23, 2022 20:15

  Thanks for that - I'm following along with this ticket on my end so I'll be sure to post updates here.

  0
• 

  000

  • February 24, 2022 11:05

  Yes, I see this working how I would expect on my end.

  
  master @cPRex is your "server test" different to common servers cPanel ?? please see answer to 94419585:

  0
• 

  cPRex Jurassic Moderator

  • February 24, 2022 13:05

  That's good to know - my particular test machine did not have PHP-FPM enabled.

  0
• 

  000

  • February 24, 2022 13:10

  That's good to know - my particular test machine did not have PHP-FPM enabled.

  
  which is the MORE speed PHP handler?

  0
• 

  cPRex Jurassic Moderator

  • February 24, 2022 13:19

  Each server will have unique requirements, so I'd recommend reading through the options here:

  0
• 

  000

  • February 24, 2022 22:55

  I was going to mention that editing the Apache configuration directly is fine for brief testing, but it should be performed through includes to ensure it doesn't get overwritten in the future. I'm not sure why that value isn't working for you on that particular machine. Could you open a ticket with our support team so we can check this out?

  
  master @cPRex one more time the solution from team is: [QUOTE]"... You may, therefore, wish to seek assistance from a qualified system administrator for this issue. "
  :-s

  0
• 

  cPanelAustin

  • February 24, 2022 23:59

  Hello @000, I'm Austin, one of the analysts investigating the details of your ticket. It is true that we ask, if you must make use of the LimitRequestBody directive, that you seek the assistance of a Systems Administrator to implement the customization required to make it work for every situation including FPM, or other languages. This kind of customization is not provided by cPanel. As I mentioned in the summary of my original investigation in the ticket, the LimitRequestBody directive will not provide the utility that you desire, so you'd need to see out alternative solutions, of which I made 2 recommendations for PHP. The potential solutions for other languages would need to be investigated by your systems administrator. --- After consulting with my colleagues further on this, it was remembered that ModSecurity also offers a similar configuration:

  0
• 

  000

  • February 25, 2022 00:08

  ...it was remembered that ModSecurity also offers a similar configuration:

  0

Please sign in to leave a comment.