Index: openacs-4/etc/config.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/etc/config.tcl,v diff -u -r1.19.2.19 -r1.19.2.20 --- openacs-4/etc/config.tcl 7 Feb 2005 00:35:30 -0000 1.19.2.19 +++ openacs-4/etc/config.tcl 21 Feb 2005 10:57:57 -0000 1.19.2.20 @@ -236,6 +236,8 @@ ns_param address $address ns_param hostname $hostname ns_param port $httpport +# setting maxinput higher than practical may leave the server vulnerable to resource DoS attacks +# see http://www.panoptic.com/wiki/aolserver/166 ns_param maxinput [expr 20 * 1024 * 1024] ;# Maximum File Size for uploads in bytes ns_param recvwait [expr 5 * 60] ;# Maximum request time in minutes