There are many PoCs online that work on realistic setups (like PHP docker image). If you're curious you can try to replicate it locally.
many php setups sit behind nginx, caddy, or other webserver with a max body size limit.
anyone following OWASP / similar guidelines was probably okay here (for this particular PoC path), if not using apache/mod_php, i would think.