The first part is a small patch against the PHP core, that implements a few low-level protections against bufferoverflows or format string vulnerabilities and the second part is a powerful PHP extension that implements all the other …
See the article here:
Acunetix Web Application Security Blog » PHP “multipart/form-data …