Update documentation

Author: hirunatan

README.rst

@@ -44,5 +44,6 @@ it depends on the software you are using. For example, if you use apache, you sh
 
 This is a complementary measure, because you'll usually want normal users that exceed the size by a
 reasonable amount to get a friendly form validation message, while attacking users will see how their
-connection is abruptly cut before the file finishes uploading.  
+connection is abruptly cut before the file finishes uploading. So the recommended setting is to have
+max_upload_size a small value (e.g. 5Mb) and LimitRequestBody a higher one (e.g. 100Mb).