Re: Error behaviour for max_input_vars

From: Date: Tue, 13 Sep 2022 18:06:54 +0000
Subject: Re: Error behaviour for max_input_vars
References: 1  Groups: php.internals 
Request: Send a blank email to internals+get-118615@lists.php.net to get a copy of this message
On Tue, Sep 13, 2022, 7:58 PM Mel Dafert <mel@dafert.at> wrote: > The options I see feasible are: > - A new ini setting max_input_vars_abort (default to 0), which, > if set > to 1, will abort the request if there are more input variables than > allowed. > - A method to reliably detect whether the input vars were truncated (eg. > function has_post_been_truncated(): bool), so the application > can > decide whether to abort or not. > - Deciding that max_input_vars is not relevant anymore and > should be > handled by the likes of Apache and NGINX, thus changing the default to > 0 and removing the setting > over a deprecation period. Creating more ini settings is not very exciting. I do really like option 2 though.

« previous php.internals (#118615) next »