php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #18961 POST size more than 6k fails
Submitted: 2002-08-17 22:12 UTC Modified: 2002-09-03 18:11 UTC
From: tater at potatoe dot com Assigned:
Status: Closed Package: Scripting Engine problem
PHP Version: 4CVS-2002-08-17 OS: Mac OS X 10.1.5 / Darwin 5.5
Private report: No CVE-ID: None
 [2002-08-17 22:12 UTC] tater at potatoe dot com
Submitting POST variables with a total size of more than about 6000 bytes results in some kind of overflow. This is on Apache, compiled as a static module, with 4.3 CVS. (ZE and ZE2 behave the same.) Part of the POST is read by the PHP script, the rest seems to go to Apache as if it was a request - it shows up in the access log or error log as such anyway.

This problem does NOT happen with the php-4.3.0-dev-zend2-alpha2 release.

Here is a form to demonstrate:

<form enctype="multipart/form-data" method="post">
<?php $x = str_pad('', 6000, 'x'); ?>
<input type=hidden name=x value="<?php echo $x; ?>">
<input type=submit>
</form>
<form method="post">
<?php $x = str_pad('', 6000, 'x'); ?>
<input type=hidden name=x value="<?php echo $x; ?>">
<input type=submit>
</form>
<?php
foreach ($_POST as $k => $v)
{
    echo "<li>_POST($k) length = ".strlen($v)."\n";
}
?>

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-08-19 08:58 UTC] iliaa@php.net
This bug has been fixed in CVS.

In case this was a PHP problem, snapshots of the sources are packaged
every three hours; this change will be in the next snapshot. You can
grab the snapshot at http://snaps.php.net/.
 
In case this was a documentation problem, the fix will show up soon at
http://www.php.net/manual/.

In case this was a PHP.net website problem, the change will show
up on the PHP.net site and on the mirror sites in short time.
 
Thank you for the report, and for helping us make PHP better.


 [2002-09-03 18:11 UTC] sniper@php.net
Please try using this CVS snapshot:

  http://snaps.php.net/php4-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-latest.zip
 [2002-09-03 18:11 UTC] sniper@php.net
oops..this was fixed already. :I

 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun Dec 22 11:01:30 2024 UTC