|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2012-01-12 14:16 UTC] sv3tli0 at bgspot dot eu
[2012-01-12 17:34 UTC] rasmus@php.net
[2012-01-12 17:34 UTC] rasmus@php.net
-Type: Security
+Type: Documentation Problem
[2012-01-21 23:09 UTC] frozenfire@php.net
[2012-01-21 23:09 UTC] frozenfire@php.net
[2012-01-21 23:09 UTC] frozenfire@php.net
-Status: Open
+Status: Closed
-Assigned To:
+Assigned To: frozenfire
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Sat Oct 25 14:00:01 2025 UTC |
Description: ------------ The max_input_vars doesn't limiting multi-dimensional arrays! If user post var[] the uploaded array wont be limitted. Test script: --------------- <form action="" method="post"> <?php $max_input_vars = ini_get('max_input_vars'); for ($i=0; $i < $max_input_vars + 5; $i++) { echo "<input type='hidden' name='a[]' value='$i'>\n"; } var_dump($max_input_vars); var_dump(count($_POST)); ?> <input type="submit"> </form> Expected result: ---------------- string(4) "1000" int(1000) Actual result: -------------- string(4) "1000" int(1005)