title: Which attacks exploiting php.ini's directives about HTTP input are possible?
body: <p>Apart the obvious ones, like <code>max_input_time</code> and <code>post_max_size</code>. Can an unlimited <code>max_input_vars</code> be a vector for attacks, for example?</p>
  
  <p>Should I care having limited <code>upload_max_filesize</code> and <code>max_file_uploads</code> since I already have <code>post_max_size</code> set?</p>
  
  <p>Which of the following settings are actually important to mitigate attack attempts?</p>
  
  <ul>
  <li><code>max_input_nesting_level</code></li>
  <li><code>max_input_vars</code> - prevents hash collision attacks?</li>
  <li><code>upload_max_filesize</code></li>
  <li><code>max_file_uploads</code></li>
  </ul>