Changing upload_max_filesize on PHP

Question

I'm using PHP 5.3.0 and have encountered something that might be a bug (in which case I'll report it) or might be me - so I'm asking to make sure.

When running this code:

<?php
ini_set('upload_max_filesize', '10M');
echo ini_get('upload_max_filesize'), ", " , ini_get('post_max_size')

I end up with:

2M, 8M

This is despite my php.ini setting these higher:

upload_max_filesize = 10M
post_max_size = 10M

(occuring only once)

Because the error occurs after setting the value as well as it being set in php.ini I'm inclined to think it's a bug. Can anyone confirm or point me where I'm going wrong?

Update: Looks like restarting Apache fixed this - I always thought it didn't need to be restarted if you changed php.ini.

"I always thought it didn't need to be restarted if you changed php.ini." PHP CLI picks up changes immediately, because it parses php.ini with every invocation. mod_php parses php.ini once -- when apache starts up. — Frank Farmer, Jul 14 '09 at 02:32
I had the same problem recently. upload_max_filesize wouldn't get into effect without restarting Apache. I'm on a PHP 5.2.9. After the restart everything is working okay. — Haluk, Feb 25 '10 at 08:37
To avoid a full apache restart, just use "sudo service apache2 reload" — user1048839, Jun 04 '15 at 20:25

score 82 · Accepted Answer · edited Apr 30 '15 at 06:36

82

You can't use shorthand notation to set configuration values outside of PHP.ini. I assume it's falling back to 2MB as the compiled default when confronted with a bad value.

On the other hand, I don't think upload_max_filesize could be set using ini_set(). The "official" list states that it is PHP_INI_PERDIR .

edited Apr 30 '15 at 06:36

Pacerier

86,231
106
366
634

answered Jul 13 '09 at 22:28

Rob

47,999
5
74
91

20

You think right! You can't set upload_max_filesize using ini_set() because upload_max_filesize is a PHP_INI_PERDIR type that means changeable only via: php.ini, .htaccess or httpd.conf as stated at: http://php.net/manual/en/configuration.changes.modes.php – Marco Demaio Feb 12 '10 at 12:03
3

Actually, you can use shorthand notation outside of PHP.ini; you can use it in `.htaccess` and also with `ini_set`. Maybe not in all versions, though. – Protector one Apr 13 '11 at 21:08

score 79 · Answer 2 · answered Jul 13 '09 at 22:27

79

Are you using a shared hosting provider? It could be master settings overriding anything you're trying to change. Have you tried adding those into your .htaccess?

php_value upload_max_filesize 10M
php_value post_max_size 10M

answered Jul 13 '09 at 22:27

karim79

339,989
67
413
406

1

No, this is my own Apache/PHP instance on my machine (which is Windows if it's relevant). I'll try adding those to the Apache config. – Ross Jul 13 '09 at 22:28
6

Update: This does affect it (changes them to 10) so this method works. I'm still quite confused as to why it's not working in php.ini or using ini_set. – Ross Jul 13 '09 at 22:30
+1 this is definitely the way to go if you can't get to php.ini - thank you very much. – Alex Coplan Dec 29 '11 at 13:16
3

Note this only works with Apache running PHP as Module, not as CGI – ChrisV Jun 18 '12 at 09:57
I would say this is the preferred method even with access to the `php.ini` file. Allows you to set these permissions based on need rather than as a global setting. – Bryant Makes Programs Dec 20 '17 at 19:27
This not works for me, and I can't override the master configuration of my free hosting service, at least for my domain. – HF_ Feb 01 '19 at 13:03

score 48 · Answer 3 · answered Mar 14 '15 at 01:25

48

Since I just ran in to this problem on a shared host and was unable to add the values to my .htaccess file I thought I'd share my solution.

I made an ini file with the values in it. Simple as that:

Make a file called ".user.ini" and add your values

upload_max_filesize = 150M
post_max_size = 150M

Boom, problem solved.

answered Mar 14 '15 at 01:25

quid

1,024
9
9

6

"In addition to the main php.ini file, PHP scans for INI files in each directory, starting with the directory of the requested PHP file, and working its way up to the current document root." http://php.net/manual/en/configuration.file.per-user.php – untill Sep 29 '15 at 10:35
1

Works great with a wordpress site! Thanks! – avenged_badger Sep 07 '16 at 19:24
This worked great as I'm unable to do it from .htaccess. Thanks man! – Strategist Nov 17 '17 at 08:32
1

PHP by default re-read user.ini file every 5 minutes. So be patient if the result does not appear immediately – Andrey Yaremenko Aug 29 '19 at 14:25
Im unable to set this higher than 150M, is this normal? – Parsa Yazdani Apr 20 '20 at 23:46
@ParsaYazdani I think because value is set / limited in an upper level, like a general .ini file. – adrianTNT May 15 '20 at 11:21

score 14 · Answer 4 · edited Jun 07 '16 at 07:31

14

I got this to work using a .user.ini file in the same directory as my index.php script that loads my app. Here are the contents:

upload_max_filesize = "20M"
post_max_size = "25M"

This is the recommended solution for Heroku.

edited Jun 07 '16 at 07:31

Darren

13,050
4
41
79

answered Jan 12 '15 at 22:17

dwenaus

3,206
2
27
27

score 7 · Answer 5 · answered Jul 13 '09 at 22:28

7

This can also be controlled with the apache configuration. Check the httpd.conf and/or .htaccess for something like the following:

php_value upload_max_filesize 10M

answered Jul 13 '09 at 22:28

Byron Whitlock

52,691
28
123
168

score 1 · Answer 6 · answered Sep 14 '22 at 20:59

Please be advised that setting a large post_max_size or upload_max_filesize for a complete server or a complete virtual host is not a good idea as it may lead to increased security risks.

The risk is that an attacker may send very large POST requests and overloading your server memory and CPU as it has to parse and process those requests before handling them to your PHP script.

So it's best to limit changing this setting to some files or directories. For example if I want to /admin/files/ and /admin/images/ I can use:

<If "%{REQUEST_URI} =~ m!^/admin/(files|images)/! && -n %{HTTP_COOKIE}">
    php_value post_max_size 256M
    php_value upload_max_filesize 256M
</If>

I also require the request to have a cookie to avoid basic attacks. This will not protect you against attacks coming from non-authenticated users, but may delay any attack.

This setting can be used in Apache server configuration files, and .htaccess files as well.

score 0 · Answer 7 · answered Apr 19 '13 at 21:54

0

If you are running in a local server, such as wamp or xampp, make sure it's using the php.ini you think it is. These servers usually default to a php.ini that's not in your html docs folder.

answered Apr 19 '13 at 21:54

Beachhouse

4,972
3
25
39

score 0 · Answer 8 · answered May 18 '15 at 19:28

0

I've faced the same problem , but I found out that not all the configuration settings could be set using ini_set() function , check this Where a configuration setting may be set

answered May 18 '15 at 19:28

Hassan Nemir

472
4
9

score -1 · Answer 9 · answered May 31 '12 at 13:13

if you use ini_set on the fly then you will find here http://php.net/manual/en/ini.core.php the information that e.g. upload_max_filesize and post_max_size is not changeable on the fly (PHP_INI_PERDIR).

Only a php.ini, .htaccess or vhost config change seems to change these variables.

score -2 · Answer 10 · answered Oct 31 '19 at 06:19

-2

This solution can be applied only if the issue is on a WordPress installation!

If you don't have FTP access or too lazy to edit files,

You can use Increase Maximum Upload File Size plugin to increase the maximum upload file size.

answered Oct 31 '19 at 06:19

Disapamok

1,426
2
21
27

score -13 · Answer 11 · edited Jun 11 '13 at 12:18

-13

You can use also in the php file like this

<?php ini_set('upload_max_filesize', '200M'); ?>

edited Jun 11 '13 at 12:18

Flexo

87,323
22
191
272

answered Jun 07 '13 at 09:43

Nishant Patel

335
1
5
23

Changing upload_max_filesize on PHP

11 Answers11

Linked

Related