Monday, January 5, 2015

Use of max_input_vars in php.ini of your php application to restrict DoS attacks

This particular property is commented out by default in php.ini file. This can be a useful variable to restrict GET, POST and cookie parameters and thereby restricting the size of the post to the application. For information, pl. refer to php docs

********php.ini*********
; How many GET/POST/COOKIE input variables may be accepted
; max_input_vars = 1000
max_input_vars = 4000
**********************

No comments:

Post a Comment