VirtueMart Forum

VirtueMart 2 + 3 => Virtuemart Development and bug reports => Topic started by: MarcoDings on January 18, 2012, 11:21:09 am

Title: suhosin[878]: ALERT - configured request variable name length limit exceeded
Post by: MarcoDings on January 18, 2012, 11:21:09 am

I am aware this is not really a bug as such. But apparently vm2 does not play nice with the default shosin installation

Jan 18 08:09:18 srv42 suhosin[878]: ALERT - configured request variable name length limit exceeded - dropped variable 'quantity%5B%5D=1&option=com_virtuemart&view=cart&virtuemart_product_id%5B%5D=3&virtuemart_manufacturer_id=2&virtuemart_category_id%5B%5D=939' (attacker '86.57.245.19', file '/home/micromem/srv/micromem.q-hive.com/www/index.php')

what would be the needed configuration ( what variables and what values) to have vm and suhosin "play nice"

tia Marco

Title: Re: suhosin[878]: ALERT - configured request variable name length limit exceeded
Post by: Milbo on January 18, 2012, 11:31:26 am

Hmm, wie use also suhosin, but not errors so far.

Title: Re: suhosin[878]: ALERT - configured request variable name length limit exceeded
Post by: MarcoDings on February 02, 2012, 16:11:47 pm

Hi,

Yet we see them ;)

Please share your suhosin settings ;)

Title: Re: suhosin[878]: ALERT - configured request variable name length limit exceeded
Post by: dontflinch on February 02, 2012, 20:35:12 pm

we also use suhosin.  you need to google the suhosin setting and edit your appropriate php.ini file to a larger value.


from the error you mentioned it is probably one or more of these:

suhosin.request.max_array_depth
suhosin.request.max_array_index_length
suhosin.request.max_totalname_length
suhosin.request.max_value_length
*suhosin.request.max_varname_length
suhosin.request.max_vars