test case for suhosin.cookie.max_vars

1 files changed, 27 insertions, 0 deletions

diff --git a/tests/filter/input_filter_cookie_max_vars.phpt b/tests/filter/input_filter_cookie_max_vars.phpt
new file mode 100644
index 0000000..9047df3
--- /dev/null
+++ b/tests/filter/input_filter_cookie_max_vars.phpt
@@ -0,0 +1,27 @@
+--TEST--
+suhosin input filter (suhosin.cookie.max_vars)
+--SKIPIF--
+<?php include "../skipif.inc"; ?>
+--INI--
+suhosin.log.syslog=0
+suhosin.log.sapi=0
+suhosin.log.stdout=255
+suhosin.log.script=0
+suhosin.cookie.max_vars=3
+--COOKIE--
+a=1; b=2; c=3; d=4
+--FILE--
+<?php
+var_dump($_COOKIE);
+?>
+--EXPECTF--
+array(3) {
+  ["a"]=>
+  string(1) "1"
+  ["b"]=>
+  string(1) "2"
+  ["c"]=>
+  string(1) "3"
+}
+ALERT - configured COOKIE variable limit exceeded - dropped variable 'd' - all further COOKIE variables are dropped (attacker '%s', file '%s')
+ALERT - dropped 1 request variables - (0 in GET, 0 in POST, 1 in COOKIE) (attacker 'REMOTE_ADDR not set', file '%s')