svn: /phpdoc/en/trunk/reference/info/ ini.xml

frozenfire Sat, 21 Jan 2012 23:09:07 +0000 Revision: http://svn.php.net/viewvc?view=revision&revision=322553 Log: Rewrote max_input_vars directive description for clarity, and indicated that this limit applies only to each nesting level of a multidimensional input array. Closes bug #60728. Bug: https://bugs.php.net/60728 (Open) max_input_vars doesn't limiting multi-dimensional arrays Changed paths: U phpdoc/en/trunk/reference/info/ini.xml Modified: phpdoc/en/trunk/reference/info/ini.xml =================================================================== --- phpdoc/en/trunk/reference/info/ini.xml 2012-01-21 23:07:07 UTC (rev 322552) +++ phpdoc/en/trunk/reference/info/ini.xml 2012-01-21 23:09:07 UTC (rev 322553) @@ -261,11 +261,12 @@ <listitem> <para> How many <link linkend="language.variables.external">input - variables</link> may be accepted. Available mainly for security reasons - to avoid hash collisions attacks. If there would be more variables in - any of <varname>$_GET</varname>, <varname>$_POST</varname>, ... arrays - then <constant>E_WARNING</constant> is issued and extra variables are - ignored. + variables</link> may be accepted. Use of this directive mitigates + the possibility of denial of service attacks which use hash collisions. + If there are more input variables than specified by this directive, + an <constant>E_WARNING</constant> is issued, and further input + variables are truncated from the request. This limit applies only + to each nesting level of a multi-dimensional input array. </para> </listitem> </varlistentry>