[wp-trac] Re: [WordPress Trac] #8152: WordPress should force all URL query string requests to be 255 characters or less

WordPress Trac wp-trac at lists.automattic.com
Tue Nov 11 17:25:41 GMT 2008


#8152: WordPress should force all URL query string requests to be 255 characters
or less
-------------------------+--------------------------------------------------
 Reporter:  _ck_         |        Owner:  anonymous
     Type:  defect       |       Status:  new      
 Priority:  normal       |    Milestone:  2.8      
Component:  Security     |      Version:  2.6.1    
 Severity:  normal       |   Resolution:           
 Keywords:  needs-patch  |  
-------------------------+--------------------------------------------------
Comment (by westi):

 You can shorten that too:

 {{{
 <?php
 /*
 Plugin Name: Block Long Queries
 */
 if (strlen($_SERVER['QUERY_STRING'])>255 ||
 strlen($_SERVER['REQUEST_URI'])>320) {
 status_header(414);
 @exit;
 }
 ?>
 }}}

 Although extra headers may be needed in some cases I suppose.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/8152#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list