Take the 2-minute tour ×  My users want to upload large files
(50-100MB) in the CMS backend of a PHP web application. I could
adjust the upload_max_filesize and post_max_size settings for
PHP globally in this virtual host, but I'm afraid that would
make Denial of Service attacks easier than necessary.  In
theory, these two settings can be adjusted per directory (either
in the virtual host config file, or via .htaccess files), and I
only need the larger values in the admin area. Unfortunately,
this application has only a start.php in the web root (single
point of entry), and all other PHP files are included from
there. This appears to make a per-directory setting impossible.
I've tried to match the path used in the CMS with <Location>,
but even with the correct path, the php_value directives don't
have any effect.  <LocationMatch ^/admin>    php_value
upload_max_filesize  100MB    php_value  post_max_size
100MB  (mod_rewrite is used to translate a path like
/admin/content/bla to /start.php?_p=/admin/co