"Configure it badly" is simplistic. If you have a webmail application, how do you allow your users to upload reasonable email attachments (say 10MB for most pro

"Configure it badly" is simplistic. If you have a webmail application, how do you allow your users to upload reasonable email attachments (say 10MB for most providers) while not exposing yourself to this particular problem? The max_input_vars parameter was a new one for me.