Re: Re: another fix for max_input_vars.

From: Date: Wed, 04 Jan 2012 21:48:16 +0000
Subject: Re: Re: another fix for max_input_vars.
References: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18  Groups: php.internals 
Request: Send a blank email to internals+get-57216@lists.php.net to get a copy of this message
On 01/04/2012 01:27 PM, Stas Malyshev wrote: > Hi! > >> Right, like I said in my previous message, if this is caught by >> display_start_errors, I am ok with it. We need the default/no php.ini >> file case to not leak information like this. > > Just checked - it does not display error if display_startup_errors if > off, does display if it's on. Right, that seems ok. The other thing is that we need to clarify that it actually only limits the number of variables per nesting level. The current name and the description doesn't make that clear. You can still send 1M post vars in a single POST if you just nest them in a 1000x1000 2d array. Of course, this is likely going to hit the post_max_size limit, although many sites that do file uploads will have cranked that way up. -Rasmus

« previous php.internals (#57216) next »