WordPress.org

Ready to get started?Download WordPress

Forums

All In One WP Security & Firewall
[resolved] Change file size limit in Firewall (4 posts)

  1. bobk88
    Member
    Posted 1 year ago #

    Just installed your plugin and am starting by turning on the 'critical features.'

    My question is regarding the size limit for file uploads.

    Because I sometimes need to upload larger files, in the past I changed the size limit to 20 MB. My hosting service instructed me how to do this - it involved editing a php.ini file on my server. (I had also tried changing the setting in wp-config.php, but that seemed to cause problems).

    After activating the Firewall in your plugin, I was able to upload a file larger than 10 MB. This suggests that the php.ini setting overrides the plugin.

    So my question is:

    Is this ok? Is there any reason for concern?

    Thanks!

    I'm a big fan of your plugins and your helpful site and email newsletter, and own three of the premium plugs.

    http://wordpress.org/extend/plugins/all-in-one-wp-security-and-firewall/

  2. mra13
    Member
    Plugin Author

    Posted 1 year ago #

    Hi, I don't think you have anything to worry about. This plugin doesn't override any file upload limit. So I would recommend you to check other settings on your site. The media file upload capability is something only an admin can do from the admin dashboard. If an attacker gets inside your WP Admin account then being able to upload a 10MB file or a 20MB file is not going to make any difference.

  3. bobk88
    Member
    Posted 1 year ago #

    I forgot to mention that I want to keep the limit at 20 MB, so I'm glad the plugin setting is being overridden.

    Thanks for the reply - it's good to know this should be OK.

  4. AITpro
    Member
    Posted 1 year ago #

    Max upload filesize is ONLY controlled by your php.ini file using these 2 directives so yeah a plugin or wp-config.php setting does not have the capability to override these directives.

    post_max_size = 20M
    upload_max_filesize = 20M

    ini_set directives that can be set via a wp-config.php file (link below).
    Note: If you try to add the upload_max_filesize and post_max_size directives to a wp-config.php file using ini_set they will be ignored/not processed.

    ait-pro.com/aitpro-blog/4349/misc-projects/wordpress-tips-tricks-fixes/php5-3-x-php5-4-x-user-ini-file-does-not-work-known-php5-3-x-user-ini-fastcgi-wordpress-zend-issue/

    Php.ini directives: http://www.php.net/manual/en/ini.list.php

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic