php forum
php mysql forum
php mysql smarty
 
Topic Options
#313049 - 02/03/07 08:46 AM Strange effect
Zarzal Offline
Coder

Registered: 07/03/01
Posts: 805
Loc: Berlin, Germany
On ubbcentral I report a problem with forummange.php
'If you try to manage forums (there are over 250 in this board) and submit your changes you will og out, the cookie is destroyed.
Rick take a clooser look and find out thats not related to Threads but to the php or server config. He is not able to say excactly whats going on.

"Ok, this one is a bit strange. It took a long time to track down but basically, it seems PHP is configured to only allow so much _POST data. Once it reaches 200 forums it actually blanks out the _COOKIE variables. It ended up wiping out all of the forum details for anything beyond that amount. This could be a PHP setting or an apache setting in how much data it will actually accept. I tried to duplicate this on my test site by making over 200 forums and no problem."

So I digg deeper and check phpinfo. I found a modul varfilter (Hardening-Patch's variable filter support)
running on this server. Is someone here using this? We have to find out whats going on on this server to teach sthe support what need to be changed.

The setting of this modul are:
hphp.cookie.disallow_nul 1 1
hphp.cookie.max_array_depth 100 100
hphp.cookie.max_array_index_length 64 64
hphp.cookie.max_name_length 64 64
hphp.cookie.max_totalname_length 256 256
hphp.cookie.max_value_length 10000 10000
hphp.cookie.max_vars 100 100
hphp.get.disallow_nul 1 1
hphp.get.max_array_depth 50 50
hphp.get.max_array_index_length 64 64
hphp.get.max_name_length 64 64
hphp.get.max_totalname_length 256 256
hphp.get.max_value_length 512 512
hphp.get.max_vars 100 100
hphp.post.disallow_nul 1 1
hphp.post.max_array_depth 4000 4000
hphp.post.max_array_index_length 64 64
hphp.post.max_name_length 64 64
hphp.post.max_totalname_length 256 256
hphp.post.max_value_length 65000 65000
hphp.post.max_vars 3000 3000
hphp.request.disallow_nul 1 1
hphp.request.max_array_depth 2000 2000
hphp.request.max_array_index_length 64 64
hphp.request.max_totalname_length 256 256
hphp.request.max_value_length 65000 65000
hphp.request.max_varname_length 64 64
hphp.request.max_vars 600 600
hphp.upload.disallow_elf_files 1 1
hphp.upload.max_uploads 25 25
hphp.upload.verification_script no value no value
varfilter.max_array_depth 100 100
varfilter.max_array_index_length 64 64
varfilter.max_request_variables 600 600
varfilter.max_totalname_length 256 256
varfilter.max_value_length 200000 200000
varfilter.max_varname_length 64 64

any ideas?
_________________________
my forum: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de

Top
#313054 - 02/03/07 06:30 PM Re: Strange effect [Re: Zarzal]
AllenAyres Administrator Offline
I type Like navaho

Registered: 03/10/00
Posts: 25366
Loc: Texas
I'm still trying to wrap my brain around 250 forums on one site eek
_________________________
- Allen wavey
- What Drives You?

Top
#313057 - 02/03/07 11:01 PM Re: Strange effect [Re: AllenAyres]
Gizmo Administrator Offline
Wizard

Registered: 01/10/00
Posts: 5092
Loc: Portland, OR, USA
haha, sounds crazy doesn't it...
_________________________
UBB.Dev - Where you too can render your UBB install completely useless...
UGN Security, Elite Web Gamers & VNC Web Design Owner

Top
#313058 - 02/04/07 05:14 AM Re: Strange effect [Re: Gizmo]
Zarzal Offline
Coder

Registered: 07/03/01
Posts: 805
Loc: Berlin, Germany
I found the source of the problem. Its the varfilter:
http://forum.hardened-php.net/viewtopic.php?pid=211

Now I wait for provider response and change of some values.
_________________________
my forum: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de

Top


Top Posters Last 30 Days
AllenAyres 83
Gizmo 29
sirdude 25
Zarzal 22
blaaskaak 13
willing 7
swebs 6
Who's Online
1 Registered (sirdude), 42 Guests and 7 Spiders online.
Key: Admin, Global Mod, Mod
Shout Box

Latest Posts
Nice Ajax Chat
by sirdude
22 minutes 15 seconds ago
[7.x] UBB.Post Templates v0.1
by sirdude
Today at 12:48 PM
Team UBBDev Rides Again!
by AllenAyres
Yesterday at 10:56 PM
[7.3.x] ubb.links
by AllenAyres
07/03/08 06:15 PM
Changing currency for subscriptions?
by AllenAyres
07/03/08 01:15 PM
Protect users emails
by AllenAyres
07/03/08 11:36 AM
VPS and Newbies
by Gizmo
07/02/08 09:08 PM
New Mods
Protect users emails
by Basil Fawlty
06/29/08 08:44 AM
[7.3.x] Scheduled board close for backup
by blaaskaak
06/26/08 04:01 AM
[7.3+] CustomTag - Audo Embedding
by Gizmo
06/24/08 07:52 PM
[7.3.x] ubb.links
by AllenAyres
06/20/08 11:50 PM
[7.3] Dissallow quotes more then 3 levels deep
by blaaskaak
06/09/08 09:01 AM
Newest Members
ryzilla, M4D, Jer, Kanigo2, Bubba
13302 Registered Users

 

 

 
fusionbb message board php hacks