[PHP] 1000+ character POSTed strings get mangled

[Jonny Roller]

If I POST a string greater than 1000 character through a form, the 
resulting string gets mangled.  What I get back is the first 1000 
characters of the string, then the name of the form variable, an equal 
sign (=) and then the entire string again.  If I change the form to a 
GET, this problem does not occur.

If I add a phpinfo() call to the same page, I see that $_REQUEST and 
$_POST variables are indeed mangled.  However, 
$_SERVER["CONTENT_LENGTH"] reports the correct string length.

I did not compile PHP with the hardened flag... adding 
"varfilter.max_value_length = 5000" to the php.ini file had no effect.

I recreated this form with a Perl CGI and could not recreate the problem 
in that environment.

I'm running PHP 4.3.8 with Apache 2.0.50 on Linux but it also occurred 
with PHP 4.3.9 on Apache 2.0.52.  However, a similarly configured (but 
not identical) server running the same versions of PHP and Apache does 
not exhibit this behavior.

Any assistance that can be provided would be greatly appreciated.
- Jonny Roller
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php