archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-16 05:58:45 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Added max_input_vars directive to prevent attacks based on hash collisions

Browse source
This commit is contained in:
Dmitry Stogov 2011-12-15 10:31:02 +00:00
parent 4dfd69e84b
commit e467a791d3
3 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
UPGRADING
View file

@ -75,6 +75,10 @@ UPGRADE NOTES - PHP 5.4
- safe_mode_protected_env_vars - safe_mode_protected_env_vars
- zend.ze1_compatibility_mode - zend.ze1_compatibility_mode
- the following new directives were added
- max_input_vars - specifies how many GET/POST/COOKIE input variables may be
accepted. default value 1000.
============================= =============================
2. Reserved words and classes 2. Reserved words and classes

3
php.ini-development
View file

@ -397,6 +397,9 @@ max_input_time = 60
; http://php.net/max-input-nesting-level ; http://php.net/max-input-nesting-level
;max_input_nesting_level = 64 ;max_input_nesting_level = 64
; How many GET/POST/COOKIE input variables may be accepted
; max_input_vars = 1000
; Maximum amount of memory a script may consume (128MB) ; Maximum amount of memory a script may consume (128MB)
; http://php.net/memory-limit ; http://php.net/memory-limit
memory_limit = 128M memory_limit = 128M

3
php.ini-production
View file

@ -397,6 +397,9 @@ max_input_time = 60
; http://php.net/max-input-nesting-level ; http://php.net/max-input-nesting-level
;max_input_nesting_level = 64 ;max_input_nesting_level = 64
; How many GET/POST/COOKIE input variables may be accepted
; max_input_vars = 1000
; Maximum amount of memory a script may consume (128MB) ; Maximum amount of memory a script may consume (128MB)
; http://php.net/memory-limit ; http://php.net/memory-limit
memory_limit = 128M memory_limit = 128M