A lot of errors in the length of the name of the request variable in dry land

Question

I have many suhosin errors in my / var / log / messages

Dec 22 06:28:12 server suhosin[4637]: ALERT - configured request variable name length limit exceeded - dropped variable '66583-((-....-..................-....-__-......-................-......-............-........-......-\\__-))' (attacker '127.0.0.1', file '/home/user/public_html/vb/showthread.php') Dec 22 06:28:14 server suhosin[4620]: ALERT - configured request variable name length limit exceeded - dropped variable '125055-........-..............-............-Zombie-Driftwood-2010-DVDrip-..........-............-......-18-............-......-........-............' (attacker '127.0.0.1', file '/home/user/public_html/vb/showthread.php') 

Here is my suhosin configuration in php.ini

 [suhosin] suhosin.cookie.encrypt = Off suhosin.request.max_vars = 10000 suhosin.request.max_value_length = 65000 suhosin.post.max_vars = 10000 suhosin.post.max_value_length = 5000 suhosin.get.max_vars = 10000 suhosin.get.max_value_length = 10000 suhosin.memory_limit = 128M 

So how can I fix this problem? I tried to raise all the values ​​above, but that didn't work either.

Answer 1

I got the same error. To fix this, I edited /etc/php.d/suhosin.ini . I changed first

 suhosin.request.max_varname_length = 64 

to

 suhosin.request.max_varname_length = 128 

But this cannot be fixed, it just changed the error message (note the GET complaint instead of the request):

 Feb 22 17:07:04 <servern name> suhosin[23389]: ALERT - configured GET variable name length limit exceeded - dropped variable '/mehul_bakrania/feedback/personal_coach_and_peak_performance_trai/159296' (attacker '<ip address>', file <file path>') 

So I changed:

 suhosin.get.max_name_length = 64 

to

 suhosin.get.max_name_length = 128 

Then my problem was fixed. I go 128 because I noticed that the URL causing the problem is about 70 characters.

Answer 2

You can try theses:

 suhosin.get.max_name_length (default 64) suhosin.post.max_name_length (default 64) suhosin.request.max_varname_length (default 64)