[Phpmyadmin-devel] false alarm for deep recursion

Sebastian Mendel lists at sebastianmendel.de
Tue May 1 00:31:08 CEST 2007


Marc Delisle schrieb:
> Hi,
> 
> In this bug:
> http://sourceforge.net/tracker/index.php?func=detail&aid=1709463&group_id=23067&atid=377408
> 
> there are many fields involved and we get a false alarm "possible deep 
> recursion attack". Do we really need to protect from 1000 recursions 
> overall? I think that protecting from 1000 recursions for each 
> superglobal would be correct.

as it should do currently with

core.lib.php#474:

$recursive_counter--;






More information about the Developers mailing list