[Neko] MOD_NEKO_POST_SIZE

[Nicolas Cannasse]

Michael Pliskin a écrit :
> Hello list,
> 
>   I've just ran into a problem that mod_neko limits the POST data size
>   it can process. I found a way to customize this (by recompiling from
>   sources), but I am just wondering why does it limit in fact? Apache
>   has a LimitRequestBody directive which can be used to limit the body
>   if there is a need, so why mod_neko bothers to have one more
>   arbitrary constraint?

This is default security to prevent memory flooding attack against badly
configurated servers.

You can bypass this limit by using "multipart/form-data" encoding, but
then you'll have to use multipart API for retreiving the data (see
neko.Web.get/parseMultipart in haXe for example).

Best,
Nicolas