Arpad Ray wrote:
> If you set post_max_size to 0, you can parse the post data yourself from
> php://input. Combine that with the Content-Length value from
> apache_request_headers() and you have everything you need for a progress
> monitor.

Of course - this is entirely irrelevant if the client uses
Transfer-Encoding: chunked, in which case you better ignore Content-Length
if the client (or middle proxies) provided one.  And if you don't grok this,
you'd better search for the Watchfire Report on HTTP Request / Response
Spoofing vulnerabilities before creating yet another vulnerable server app.

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to