summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStefan Esser2014-02-12 14:27:04 +0100
committerStefan Esser2014-02-12 14:27:04 +0100
commit5e766313ae0de12af8828b3ac80d017844a20ca7 (patch)
tree5609c95ac02d757f6909c8698b062fe232e42a8b
parent0a5a8f7b65ee6c5e1b5a67b267fb32f5a060cfff (diff)
Add one more test
-rw-r--r--tests/filter/post_fileupload_filter_2.phpt64
1 files changed, 64 insertions, 0 deletions
diff --git a/tests/filter/post_fileupload_filter_2.phpt b/tests/filter/post_fileupload_filter_2.phpt
new file mode 100644
index 0000000..48c63dc
--- /dev/null
+++ b/tests/filter/post_fileupload_filter_2.phpt
@@ -0,0 +1,64 @@
1--TEST--
2suhosin rfc1867 file upload filter (suhosin.post.max_vars)
3--INI--
4suhosin.log.syslog=0
5suhosin.log.sapi=0
6suhosin.log.stdout=255
7suhosin.log.script=0
8suhosin.post.max_vars=5
9file_uploads=1
10upload_max_filesize=1024
11--SKIPIF--
12<?php include('skipif.inc'); ?>
13--COOKIE--
14--GET--
15--POST_RAW--
16Content-Type: multipart/form-data; boundary=---------------------------20896060251896012921717172737
17-----------------------------20896060251896012921717172737
18Content-Disposition: form-data; name="A"
19
20A
21-----------------------------20896060251896012921717172737
22Content-Disposition: form-data; name="B"
23
24B
25-----------------------------20896060251896012921717172737
26Content-Disposition: form-data; name="C"
27
28C
29-----------------------------20896060251896012921717172737
30Content-Disposition: form-data; name="D"
31
32D
33-----------------------------20896060251896012921717172737
34Content-Disposition: form-data; name="E"
35
36E
37-----------------------------20896060251896012921717172737
38Content-Disposition: form-data; name="F"
39
40F
41-----------------------------20896060251896012921717172737
42Content-Disposition: form-data; name="G"
43
44G
45-----------------------------20896060251896012921717172737--
46--FILE--
47<?php
48var_dump($_POST);
49?>
50--EXPECTF--
51array(5) {
52 ["A"]=>
53 string(1) "A"
54 ["B"]=>
55 string(1) "B"
56 ["C"]=>
57 string(1) "C"
58 ["D"]=>
59 string(1) "D"
60 ["E"]=>
61 string(1) "E"
62}
63ALERT - configured POST variable limit exceeded - dropped variable 'F' - all further POST variables are dropped (attacker 'REMOTE_ADDR not set', file '%s')
64ALERT - dropped 2 request variables - (0 in GET, 2 in POST, 0 in COOKIE) (attacker 'REMOTE_ADDR not set', file '%s')