Skip to content

Commit

Permalink
changed message for possible exploit detection
Browse files Browse the repository at this point in the history
  • Loading branch information
CybotTM committed Mar 2, 2007
1 parent 30e9b89 commit be92d59
Showing 1 changed file with 3 additions and 7 deletions.
10 changes: 3 additions & 7 deletions libraries/common.lib.php
Expand Up @@ -2704,14 +2704,10 @@ function PMA_setCookie($cookie, $value, $default = null)
}

/**
* protect against deep recursion attack CVE-2006-1549,
* 1000 seems to be more than enough
*
* @see http://www.php-security.org/MOPB/MOPB-02-2007.html
* @see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1549
* protect against possible exploits - there is no need to have so much vars
*/
if (count($GLOBALS) > 1000) {
die('possible deep recurse attack');
if (count($_REQUEST) > 1000) {
die('possible exploit');
}

/**
Expand Down

0 comments on commit be92d59

Please sign in to comment.