Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:129331 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by lists.php.net (Postfix) with ESMTPS id BDCA71A0120 for ; Thu, 20 Nov 2025 14:00:16 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1763647221; bh=7fiCjrEKs+qsyRCGuS9LCw9MFOJA/tEjl4gtv/EVVQ0=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=YcnzWxr/dgLfKpnDW6j7Mo4T/pAhkaOKGn15txj3tfkdMzuMetlU/xIY5daiy/rbN Ymr97zwBmgjLoXqLYHxaJkdR8pogPGgfZpPWo1B7R+MHDMcO5MgJvywnYP+PLf9YbH r9ZBMsk05epo+RinOyMKr3pBcvvZVZmTRbchGQ0daPOBKuZrfP9M+nYAYrv1g3KdAr oiQAfUrvr37iqblGOYG7NTPNTep5MB6HcAZ02KzBrRNxkAhw/0EjetTR/cq9JsG58V NKJkfcVWFhq4ZxKJ78WoW6C02H2HfIQ3Z0/3eMGTnbrhuQCaAp2YqFnByXUFY8YCEk nOvVEt0JvAAeg== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id BB38E180582 for ; Thu, 20 Nov 2025 14:00:16 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=BAYES_50,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_MISSING,HTML_MESSAGE, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=4.0.1 X-Spam-Virus: No X-Envelope-From: Received: from mail-vk1-f173.google.com (mail-vk1-f173.google.com [209.85.221.173]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 20 Nov 2025 14:00:15 +0000 (UTC) Received: by mail-vk1-f173.google.com with SMTP id 71dfb90a1353d-55b0af02ddeso101879e0c.3 for ; Thu, 20 Nov 2025 06:00:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=devilix.net; s=google; t=1763647208; x=1764252008; darn=lists.php.net; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=7fiCjrEKs+qsyRCGuS9LCw9MFOJA/tEjl4gtv/EVVQ0=; b=ZLPDuBvy3hlCN8N+0RSX7esqyoTCTheL6oB8qr+iwGxDr0xb4mSesDah3QHiSEF6+D RuyIiuWMklln7RNpnR53mES3yZxQT1/eIyDtI0ra7QFRvA9jj6bxETc/ARUzZr+8AiM7 ncQo7+cwXJYV6NL1oowaIqmV32379qwbZhiqE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763647208; x=1764252008; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=7fiCjrEKs+qsyRCGuS9LCw9MFOJA/tEjl4gtv/EVVQ0=; b=O2x3vJrvY+PFVvvHLjK+/JKa95Uyi6T3o/2UeuVqL8g/WWHBfLQQXK8wzO25okr6cT oXg3UuKv+jTGVhuSIUX5MVZXoUv4OKzI9YHnAFJfvZdsaMcglnSo4Pva0zII70Ln5ozT bZHu0W6wffDetbjkTKIWBOyKOocsNRnV16djuVHObhOW7yCR7xPGopG6/iDTcLQio29l yqRSN2ElpHR85efpXvrWFjLAtw4TjKzBi42keQpzSqI8LR7ERMXYv5Q68D0+dXgER5pO T6KSxf22MTS41lMEmk3RjMOg6GZUtt7nPmA9w9jr87RvHizkCv+xvOxk9NMu4M6aO0/a BVpg== X-Gm-Message-State: AOJu0YycxcxqDUzs6CQIJUeHT3oxs+XMdCKMtyhvjWBVuE1iWppPackj ul04VQL/49ewnLMtmGc3fcz3vEUsbzavOYVrmrS8fdEpZ8jKgUGoqv+LtR4JF38J3Hb58MP4ya7 U2qZtbEdiHWOzLbQhTiJauPyw0X+Phgel635jJ/OhQ9Qih15tQHn93Q== X-Gm-Gg: ASbGnct81Ti1IoJT7TgOayOuNLxhTs3yonkMU9C1XiDn6V0KDTMD30p1AB/dCu5qmXR kAbOBDwDLPC9lq6bLWaX3LlF59l0ZaZtS9Syh7xMxgpFiIhIqSAsKa081xmK3WENfdIOMFCM491 Ys2CZUGoi1QqDwiR+epZzbD7AwNRE0NkcFk13Y6BCEBQ7e94kkTcfA4BTtF30GdHacPFXCMT1De 0dw3Zf8nEcetiCtklVhOqfDjtq6CYv2MhZ6Kt2IYDFvqEmYrXU57CrGdb++ofOQaduXTzI= X-Google-Smtp-Source: AGHT+IEIyot03j9tbxg43V6y5IGBQPs9DuDlJCTlN19WdYBzz7TxtTtbOMEg9rECdhQtHzQmUztC5AqMjqMPGAhKJ80= X-Received: by 2002:a05:6122:658e:b0:55b:16ba:2854 with SMTP id 71dfb90a1353d-55b7f08c825mr874869e0c.5.1763647208248; Thu, 20 Nov 2025 06:00:08 -0800 (PST) Precedence: list list-help: list-unsubscribe: list-post: List-Id: x-ms-reactions: disallow MIME-Version: 1.0 References: In-Reply-To: Date: Thu, 20 Nov 2025 15:59:55 +0200 X-Gm-Features: AWmQ_bnegBbmQLou1maLFQu_t4wIup9HjYPseP-CFrWHjBhPizb9WLFkwag3vBg Message-ID: Subject: Re: [PHP-DEV] max_input_vars silently truncates input without an error message To: Brady Wetherington Cc: PHP internals Content-Type: multipart/alternative; boundary="0000000000005b64a90644071df9" From: narf@devilix.net (Andrey Andreev) --0000000000005b64a90644071df9 Content-Type: text/plain; charset="UTF-8" Hi Brady, I agree that E_WARNING is a poor way to handle this limit, and IMO a fatal error should be triggered instead. The ability to suppress and ignore is the root cause of why your situation is possible at all, and Laravel's behavior in this instance also did you a massive disservice. That being said however, this is also an extreme and self-inflicted edge case. 1k is an absurd number, even 100 input vars should be a sign of poor code logic. I urge you to redesign your solution entirely instead of looking for a quick workaround. Cheers, Andrey. --0000000000005b64a90644071df9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Brady,

I= agree that E_WARNING is a poor way to handle this limit, and IMO a fatal e= rror should be triggered instead. The ability to suppress and ignore is the= root cause of why your situation is possible at all, and=C2=A0Laravel'= s behavior in this instance also did you a massive disservice.
That being said however, this is also an extreme and self-infl= icted edge case. 1k is an absurd number, even 100 input vars should be a si= gn of poor code logic. I urge you to redesign your solution entirely instea= d of looking for a quick workaround.

Cheers,
= Andrey.
--0000000000005b64a90644071df9--