diff --git a/php/8.1/php.ini b/php/8.1/php.ini
index 01513ab..2f37064 100644
--- a/php/8.1/php.ini
+++ b/php/8.1/php.ini
@@ -1527,6 +1527,8 @@ session.sid_bits_per_character = 5
 ; Production Value: On
 ; http://php.net/session.upload-progress.enabled
 ;session.upload_progress.enabled = On
+; Off by default for security; a site's custom.ini can set it to On.
+session.upload_progress.enabled = Off
 
 ; Cleanup the progress information as soon as all POST data has been read
 ; (i.e. upload completed).
diff --git a/php/8.2/php.ini b/php/8.2/php.ini
index 01513ab..2f37064 100644
--- a/php/8.2/php.ini
+++ b/php/8.2/php.ini
@@ -1527,6 +1527,8 @@ session.sid_bits_per_character = 5
 ; Production Value: On
 ; http://php.net/session.upload-progress.enabled
 ;session.upload_progress.enabled = On
+; Off by default for security; a site's custom.ini can set it to On.
+session.upload_progress.enabled = Off
 
 ; Cleanup the progress information as soon as all POST data has been read
 ; (i.e. upload completed).
diff --git a/php/8.3/php.ini b/php/8.3/php.ini
index 01513ab..2f37064 100644
--- a/php/8.3/php.ini
+++ b/php/8.3/php.ini
@@ -1527,6 +1527,8 @@ session.sid_bits_per_character = 5
 ; Production Value: On
 ; http://php.net/session.upload-progress.enabled
 ;session.upload_progress.enabled = On
+; Off by default for security; a site's custom.ini can set it to On.
+session.upload_progress.enabled = Off
 
 ; Cleanup the progress information as soon as all POST data has been read
 ; (i.e. upload completed).
diff --git a/php/8.4/php.ini b/php/8.4/php.ini
index 01513ab..2f37064 100644
--- a/php/8.4/php.ini
+++ b/php/8.4/php.ini
@@ -1527,6 +1527,8 @@ session.sid_bits_per_character = 5
 ; Production Value: On
 ; http://php.net/session.upload-progress.enabled
 ;session.upload_progress.enabled = On
+; Off by default for security; a site's custom.ini can set it to On.
+session.upload_progress.enabled = Off
 
 ; Cleanup the progress information as soon as all POST data has been read
 ; (i.e. upload completed).
diff --git a/php/8.5/php.ini b/php/8.5/php.ini
index 01513ab..2f37064 100644
--- a/php/8.5/php.ini
+++ b/php/8.5/php.ini
@@ -1527,6 +1527,8 @@ session.sid_bits_per_character = 5
 ; Production Value: On
 ; http://php.net/session.upload-progress.enabled
 ;session.upload_progress.enabled = On
+; Off by default for security; a site's custom.ini can set it to On.
+session.upload_progress.enabled = Off
 
 ; Cleanup the progress information as soon as all POST data has been read
 ; (i.e. upload completed).