php forum
php mysql forum
php mysql smarty
 
Topic Options
#313049 - 02/03/07 08:46 AM Strange effect
Zarzal Offline
Coder

Registered: 07/03/01
Posts: 806
Loc: Berlin, Germany

   Strange effect to Del.icio.us Add to del.icio.us
  Digg Strange effect Digg it
On ubbcentral I report a problem with forummange.php
'If you try to manage forums (there are over 250 in this board) and submit your changes you will og out, the cookie is destroyed.
Rick take a clooser look and find out thats not related to Threads but to the php or server config. He is not able to say excactly whats going on.

"Ok, this one is a bit strange. It took a long time to track down but basically, it seems PHP is configured to only allow so much _POST data. Once it reaches 200 forums it actually blanks out the _COOKIE variables. It ended up wiping out all of the forum details for anything beyond that amount. This could be a PHP setting or an apache setting in how much data it will actually accept. I tried to duplicate this on my test site by making over 200 forums and no problem."

So I digg deeper and check phpinfo. I found a modul varfilter (Hardening-Patch's variable filter support)
running on this server. Is someone here using this? We have to find out whats going on on this server to teach sthe support what need to be changed.

The setting of this modul are:
hphp.cookie.disallow_nul 1 1
hphp.cookie.max_array_depth 100 100
hphp.cookie.max_array_index_length 64 64
hphp.cookie.max_name_length 64 64
hphp.cookie.max_totalname_length 256 256
hphp.cookie.max_value_length 10000 10000
hphp.cookie.max_vars 100 100
hphp.get.disallow_nul 1 1
hphp.get.max_array_depth 50 50
hphp.get.max_array_index_length 64 64
hphp.get.max_name_length 64 64
hphp.get.max_totalname_length 256 256
hphp.get.max_value_length 512 512
hphp.get.max_vars 100 100
hphp.post.disallow_nul 1 1
hphp.post.max_array_depth 4000 4000
hphp.post.max_array_index_length 64 64
hphp.post.max_name_length 64 64
hphp.post.max_totalname_length 256 256
hphp.post.max_value_length 65000 65000
hphp.post.max_vars 3000 3000
hphp.request.disallow_nul 1 1
hphp.request.max_array_depth 2000 2000
hphp.request.max_array_index_length 64 64
hphp.request.max_totalname_length 256 256
hphp.request.max_value_length 65000 65000
hphp.request.max_varname_length 64 64
hphp.request.max_vars 600 600
hphp.upload.disallow_elf_files 1 1
hphp.upload.max_uploads 25 25
hphp.upload.verification_script no value no value
varfilter.max_array_depth 100 100
varfilter.max_array_index_length 64 64
varfilter.max_request_variables 600 600
varfilter.max_totalname_length 256 256
varfilter.max_value_length 200000 200000
varfilter.max_varname_length 64 64

any ideas?
_________________________
my forum: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de

Top
#313054 - 02/03/07 06:30 PM Re: Strange effect [Re: Zarzal]
AllenAyres Administrator Offline
I type Like navaho

Registered: 03/10/00
Posts: 25408
Loc: Texas
I'm still trying to wrap my brain around 250 forums on one site eek
_________________________
- Allen wavey
- What Drives You?

Top
#313057 - 02/03/07 11:01 PM Re: Strange effect [Re: AllenAyres]
Gizmo Administrator Offline
Wizard

Registered: 01/10/00
Posts: 5115
Loc: Portland, OR, USA
haha, sounds crazy doesn't it...
_________________________
UBB.Dev - Where you too can render your UBB install completely useless...
UGN Security, Elite Web Gamers & VNC Web Design Owner

Top
#313058 - 02/04/07 05:14 AM Re: Strange effect [Re: Gizmo]
Zarzal Offline
Coder

Registered: 07/03/01
Posts: 806
Loc: Berlin, Germany
I found the source of the problem. Its the varfilter:
http://forum.hardened-php.net/viewtopic.php?pid=211

Now I wait for provider response and change of some values.
_________________________
my forum: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de

Top


Top Posters Last 30 Days
AllenAyres 18
Gizmo 12
sirdude 6
GEN 3
tackaberry 2
Philipp 2
willing 2
Who's Online
0 Registered (), 39 Guests and 6 Spiders online.
Key: Admin, Global Mod, Mod
Shout Box

Latest Posts
Team UBBDev Rides Again!
by Gizmo
Yesterday at 11:45 PM
Multiple Identity Detector
by MattUK
Yesterday at 04:10 PM
[7.3.x] ubb.links
by AllenAyres
08/26/08 09:57 AM
Installing FlashChat with 7.3
by Gizmo
08/23/08 05:36 AM
[7.2.1] - Naked shoutbox
by Iann128
08/22/08 07:27 PM
Nice Ajax Chat
by M4D
08/21/08 10:02 PM
51-card NVIDIA folding rig cranks out 265,200 ppd
by AllenAyres
08/13/08 10:10 PM
New Mods
Installing FlashChat with 7.3
by Paug
08/23/08 12:14 AM
[7.x] AddThis - Social Networking
by Gizmo
08/01/08 01:30 AM
[7.3.x] ubb.links
by AllenAyres
06/20/08 11:50 PM
[7.3] Dissallow quotes more then 3 levels deep
by blaaskaak
06/09/08 09:01 AM
[7.2.1] - Naked shoutbox
by sirdude
08/17/07 10:36 PM
Newest Members
welcomeback1, Paug, Tim Keating, anscers, Murphdog
13324 Registered Users

 

 

 
fusionbb message board php hacks