Re: HTTP_RAW_POST_DATA
| From: | Chris Shiflett | Date: | Wed, 12 May 2004 21:05:53 +0000 |
| Subject: | Re: HTTP_RAW_POST_DATA | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-186048@lists.php.net to get a copy of this message | ||
--- Michal Migurski <mike@teczno.com> wrote:
> Anyone have any clue why this is the case? Is there a performance
> reason that raw post data must be explicitly enabled, or is it more
> of a protective measure for overly permissive beginner scripts?
If it was always enabled, it sure would make a DoS attack easy. I'd just
send lots of huge POST requests to any PHP script on your server. Hope you
have "migs and megs of memories," as Strong Bad would say. :-)
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security - O'Reilly
Coming Fall 2004
HTTP Developer's Handbook - Sams
http://httphandbook.org/
PHP Community Site
http://phpcommunity.org/