summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--tests/filter/get_filter_post_disallow_ws.phpt27
1 files changed, 27 insertions, 0 deletions
diff --git a/tests/filter/get_filter_post_disallow_ws.phpt b/tests/filter/get_filter_post_disallow_ws.phpt
new file mode 100644
index 0000000..55c7cf1
--- /dev/null
+++ b/tests/filter/get_filter_post_disallow_ws.phpt
@@ -0,0 +1,27 @@
1--TEST--
2suhosin input filter (suhosin.post.disallow_ws)
3--INI--
4suhosin.log.syslog=0
5suhosin.log.sapi=0
6suhosin.log.stdout=255
7suhosin.log.script=0
8suhosin.post.disallow_ws=1
9--SKIPIF--
10<?php include('skipif.inc'); ?>
11--COOKIE--
12--GET--
13--POST--
14+var1=1&var2=2&%20var3=3& var4=4&
15--FILE--
16<?php
17var_dump($_POST);
18?>
19--EXPECTF--
20array(1) {
21 ["var2"]=>
22 string(1) "2"
23}
24ALERT - POST variable name begins with disallowed whitespace - dropped variable ' var1' (attacker 'REMOTE_ADDR not set', file '%s')
25ALERT - POST variable name begins with disallowed whitespace - dropped variable ' var3' (attacker 'REMOTE_ADDR not set', file '%s')
26ALERT - POST variable name begins with disallowed whitespace - dropped variable ' var4' (attacker 'REMOTE_ADDR not set', file '%s')
27ALERT - dropped 3 request variables - (0 in GET, 3 in POST, 0 in COOKIE) (attacker 'REMOTE_ADDR not set', file '%s') \ No newline at end of file