[Phpmyadmin-devel] false alarm for deep recursion
Sebastian Mendel
lists at sebastianmendel.de
Tue May 1 00:31:08 CEST 2007
Marc Delisle schrieb:
> Hi,
>
> In this bug:
> http://sourceforge.net/tracker/index.php?func=detail&aid=1709463&group_id=23067&atid=377408
>
> there are many fields involved and we get a false alarm "possible deep
> recursion attack". Do we really need to protect from 1000 recursions
> overall? I think that protecting from 1000 recursions for each
> superglobal would be correct.
as it should do currently with
core.lib.php#474:
$recursive_counter--;
More information about the Developers
mailing list