Suhosin False Positive

General Discussion of atomic repo and development projects.

Ask for help here with anything else not covered by other forums.
adrianwa
Forum User
Forum User
Posts: 34
Joined: Wed May 02, 2012 11:13 pm
Location: CA

Suhosin False Positive

Unread post by adrianwa »

I'm getting a bunch of false positive errors : colo suhosin[3013]: ALERT - configured request variable name length limit exceeded - dropped variable

Is there a way for me to prevent this from occurring? Thanks
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4149
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: Suhosin False Positive

Unread post by mikeshinn »

(suhosin is not part of ASL, so this post has been moved from the ASL forums)

You will need to configure suhosin for your system to prevent false positives. By default suhosin restricts a lot of things, so you will likely need to change a lot more than this:

suhosin.request.max_varname_length

You need to set it as high as necessary for your system. Example:

suhosin.request.max_varname_length = 128

But you'll probably run into a lot more restrictions form suhosin, like GET variable limits and so on. In short, you need to really tune suhosin for your system or expect more false positives, or disable it.
Post Reply