PHP stopgap mitigation. Don't rely on it, patch your shit!
memory_limit=-1
post_max_size less than one-quarter of the memory limit, or 8M as a fallback
Set max_input_nesting_level to a low value, such as 8
session.upload-progress.enabled=0
For PHP-FPM: Set pm.max_requests to a low value
Use SELinux / AppArmor,
set apparmor_hat,
set fatal_error_backtraces=0 and
hide the presence of PHP with expose_php=0.
Dr. Christopher Kunz
npub1f2…2wq5p
2026-10-21 13:58:46 UTC
Author Public Key
npub1f2amg3g8eahf043rnnle5qdqpmj0t9e4j44cvvf4tlapnfckumrq42wq5pSeen on
wss://relay.ditto.pubPublished at
2026-10-21 13:58:46 UTCEvent JSON
{
"id": "181e35ea03f4b8021a4ffa43c1f9597841f797ef426c5c66ef486d0056ef2396",
"pubkey": "4abbb44507cf6e97d6239cff9a01a00ee4f59735956b8631355ffa19a716e6c6",
"created_at": 1792591126,
"kind": 1,
"tags": [
[
"proxy",
"https://chaos.social/users/christopherkunz/statuses/117479252067969445",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "PHP stopgap mitigation. Don't rely on it, patch your shit!\n memory_limit=-1\n post_max_size less than one-quarter of the memory limit, or 8M as a fallback\n Set max_input_nesting_level to a low value, such as 8\n session.upload-progress.enabled=0\n For PHP-FPM: Set pm.max_requests to a low value\n Use SELinux / AppArmor,\n set apparmor_hat,\n set fatal_error_backtraces=0 and\n hide the presence of PHP with expose_php=0.",
"sig": "06ffabb276e7ba3f3a8baa8c59033d321ecdc58434b83afd0307c801f277e7ba148a4a9b77e0fa7f7a4a382d68cbc1d621b6cd6039a81f3dfdb9e89192b1061b"
}