|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #61471 Incomplete POST does not timeout but is passed to PHP
Submitted: 2012-03-22 08:02 UTC Modified: 2017-03-28 11:35 UTC
Avg. Score:4.4 ± 0.9
Reproduced:12 of 13 (92.3%)
Same Version:7 (58.3%)
Same OS:10 (83.3%)
From: jakub dot lopuszanski at nasza-klasa dot pl Assigned:
Status: Re-Opened Package: Apache2 related
PHP Version: Irrelevant OS: linux
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
Block user comment
Status: Assign to:
Bug Type:
From: jakub dot lopuszanski at nasza-klasa dot pl
New email:
PHP Version: OS:


 [2012-03-22 08:02 UTC] jakub dot lopuszanski at nasza-klasa dot pl
When a user has a really slow connection (we experienced the problem with POSTs 
longer than single TCP/IP frame) it may happen, that in expected amount of time 
the number of POST body bytes transmited is less than announced in Content-Length 

It seems, that even with the mod_reqtimeout installed and configured, apache2 
happilly passes the request to PHP interpreter, with $_POST set to an empty array.

It does so if the reqeusted page is a PHP script, which is inconsistent with the 
way a static HTML file is handled (400 Bad Request).

Test script:
I assume you have a script with var_dump($_POST) on the server.
Please note how 1755 is much greater than "foo=bar" length

netcat localhost 80

Content-Type: application/x-www-form-urlencoded
Content-Length: 1755


Expected result:
408 Request Timeout
504 Gateway Timeout
400 Bad Request
or in the worst case 
200 OK
  "foo" => "bar"

Actual result:
200 OK


Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2016-12-29 07:56 UTC]
Automatic comment on behalf of
Log: bug fixed #61471 in apache2handler
 [2016-12-29 07:56 UTC]
-Status: Open +Status: Closed
 [2017-01-05 13:06 UTC]
-Status: Closed +Status: Re-Opened
 [2017-01-05 13:06 UTC]
The patch was reverted due to issues, see . Reopening.

 [2017-02-08 00:11 UTC]
Automatic comment on behalf of
Log: Fixed bug #61471
 [2017-02-08 00:11 UTC]
-Status: Re-Opened +Status: Closed
 [2017-03-28 11:19 UTC]
Automatic comment on behalf of ab
Log: Revert "Fixed bug #61471"
 [2017-03-28 11:24 UTC]
Automatic comment on behalf of ab
Log: Revert "Fixed bug #61471"
 [2017-03-28 11:35 UTC]
-Status: Closed +Status: Re-Opened
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu May 23 19:01:38 2024 UTC