Re: Let parse_str() parse more than max_input_vars args
| From: | Rasmus Lerdorf | Date: | Wed, 14 Mar 2012 22:06:13 +0000 |
| Subject: | Re: Let parse_str() parse more than max_input_vars args | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-58941@lists.php.net to get a copy of this message | ||
On 03/14/2012 02:46 PM, Anthony Ferrara wrote:
>> But Pierre, you understand that by the time you ini_set() it in the code
>> it can only ever affect parse_str() calls.
>
> Well, wouldn't INI_ALL would allow .htaccess files to override that
> statement, and hence open the vulnerability?
No because it is already PERDIR.
-Rasmus