Random stuff about serendipity. Discussion, Questions, Paraphernalia.
-
Lux
- Regular
- Posts: 764
- Joined: Fri Aug 12, 2005 4:36 pm
- Location: Grüt, Zürich, Switzerland
-
Contact:
Post
by Lux »
Hi!
How long shall the variables be (and how is the corresponding suhosin parameter called)?
Code: Select all
Apr 23 09:08:34 rico suhosin[17309]: ALERT - configured request variable name length limit exceeded - dropped variable '/plugin/cachedAvatar_95f70358f16ee23f5d3c5a62db2fd416_49da80dd0232882bee8b791976924f73_e55be2a1302751c8eb666fe48ad6e09f' (attacker '217.86.146.99', file '/srv/www/deimeke.net/dirk/blog/index.php')
Thanks for any hint.
Dirk
-
Timbalu
- Regular
- Posts: 4598
- Joined: Sun May 02, 2004 3:04 pm
Post
by Timbalu »
You need to test...
suhosin.get.max_name_length (default 64)
suhosin.post.max_name_length (default 64)
suhosin.request.max_varname_length (default 64)
-
Lux
- Regular
- Posts: 764
- Joined: Fri Aug 12, 2005 4:36 pm
- Location: Grüt, Zürich, Switzerland
-
Contact:
Post
by Lux »
Timbalu wrote:You need to test...
suhosin.get.max_name_length (default 64)
suhosin.post.max_name_length (default 64)
suhosin.request.max_varname_length (default 64)
Thanks!
I raised them to 1024.
Will see what happens.
Cheers
Dirk
-
Timbalu
- Regular
- Posts: 4598
- Joined: Sun May 02, 2004 3:04 pm
Post
by Timbalu »
Lux wrote:I raised them to 1024.
This makes the use of suhosin tracking request userdata obsolet, I suppose.
This avatar url is very long, does it really need to?
-
Lux
- Regular
- Posts: 764
- Joined: Fri Aug 12, 2005 4:36 pm
- Location: Grüt, Zürich, Switzerland
-
Contact:
Post
by Lux »
Timbalu wrote:Lux wrote:I raised them to 1024.
This makes the use of suhosin tracking request userdata obsolet, I suppose.
Agreed!
Timbalu wrote:This avatar url is very long, does it really need to?
Up to the developpers.
This one URL was only an example, I got about 90 errors per hour.
Cheers
Dirk