Re: Discussion: Behaviour of max_input_vars

From: Date: Wed, 05 Sep 2018 11:54:35 +0000
Subject: Re: Discussion: Behaviour of max_input_vars
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-326542@lists.php.net to get a copy of this message
On Wed, Sep 5, 2018 at 4:35 PM Max Grobecker < max.grobecker@ml.grobecker.info> wrote: > Hello, > > (TL;DR: CTRL+F "Conclusion") > > > Yesterday I migrated a big project from one server to another. > After that, a very big form misbehaved and destroyed data in the database > because the form data has been truncated by PHP, > causing incomplete data stored to the database (and altering/removing data > that looks to be deleted from the form by the user). > > Of course, it was my fault since I did not raise that value on the target > system to fit my needs. > But, on the other hand, although the behaviour of max_input_vars to just > truncate the incoming data is clearly documented, it's really unexpected to > me. > > I would have expected something like Apache httpd does, if you trigger the > POST size limit: > The request fails completely, throwing an error stating that the amount of > data submitted is too big (or too much, in this case). > > > With the current behaviour you might lose data in your databases without > noticing it. > In my case, this truncated a live database with nameserver records :-/ > > > Since that variable has been introduced with PHP 5.3 many years ago, I > don't know if I'm just warming up a very old discussion. > At least, I was unable to find an existing one ;-) > > > Conclusion: > Is someone else with me, that the current behaviour of the > max_input_vars variable is a bit odd and that a proper error (instead of a > warning) > should be thrown if max_input_vars is exceeded? > > At the moment, I can't find a good way to "catch" a warning in my code to > deal with this kind of issue :-( > > > > Greeting, > Max > Form should not be allowed to LOAD more than *max_input_vars *input fields in the first place. Is that possible ? -- <https://about.me/jigar?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=thumb> Jigar Dhulla about.me/jigar <https://about.me/jigar?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=thumb>

« previous php.general (#326542) next »