The latest release (PHP 5.3.1) features the addition of the max_file_uploads INI directive. By limiting the number of uploads, users can prevent possible denial of service (DoS) attacks. Missing sanity checks around EXIF (exchangeable image file format) processing have also been added. Read the full article by The H Security on the latest PHPPHP release (PEP 5.2.1), and how to use the directive.
Source: https://threatpost.com/new-php-release-limits-file-uploads-112009/73144/

