From 5e766313ae0de12af8828b3ac80d017844a20ca7 Mon Sep 17 00:00:00 2001
From: Stefan Esser
Date: Wed, 12 Feb 2014 14:27:04 +0100
Subject: Add one more test

---
 tests/filter/post_fileupload_filter_2.phpt | 64 ++++++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 tests/filter/post_fileupload_filter_2.phpt

(limited to 'tests/filter')

diff --git a/tests/filter/post_fileupload_filter_2.phpt b/tests/filter/post_fileupload_filter_2.phpt
new file mode 100644
index 0000000..48c63dc
--- /dev/null
+++ b/tests/filter/post_fileupload_filter_2.phpt
@@ -0,0 +1,64 @@
+--TEST--
+suhosin rfc1867 file upload filter (suhosin.post.max_vars)
+--INI--
+suhosin.log.syslog=0
+suhosin.log.sapi=0
+suhosin.log.stdout=255
+suhosin.log.script=0
+suhosin.post.max_vars=5
+file_uploads=1
+upload_max_filesize=1024
+--SKIPIF--
+<?php include('skipif.inc'); ?>
+--COOKIE--
+--GET--
+--POST_RAW--
+Content-Type: multipart/form-data; boundary=---------------------------20896060251896012921717172737
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="A"
+
+A
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="B"
+
+B
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="C"
+
+C
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="D"
+
+D
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="E"
+
+E
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="F"
+
+F
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="G"
+
+G
+-----------------------------20896060251896012921717172737--
+--FILE--
+<?php
+var_dump($_POST);
+?>
+--EXPECTF--
+array(5) {
+  ["A"]=>
+  string(1) "A"
+  ["B"]=>
+  string(1) "B"
+  ["C"]=>
+  string(1) "C"
+  ["D"]=>
+  string(1) "D"
+  ["E"]=>
+  string(1) "E"
+}
+ALERT - configured POST variable limit exceeded - dropped variable 'F' - all further POST variables are dropped (attacker 'REMOTE_ADDR not set', file '%s')
+ALERT - dropped 2 request variables - (0 in GET, 2 in POST, 0 in COOKIE) (attacker 'REMOTE_ADDR not set', file '%s')
-- 
cgit v1.3