Why is client_max_body_size default set to 1m?

[jlangevin]

In that case, if you had a server that you wanted to allow up to 32mb
uploads managed via PHP scripts, how would you do so in a secure fashion
(considering DOS)?

Would you do a check for a certain request type (such as POST) as well
as the requested URL?
Or would it not be worthwhile to be that exact?

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,139769,139782#msg-139782