Re: [Wikitech-l] New Extension in SVN: Suhosin (for the Hardenend-PHP versions with Suhosin extension)

2012-02-18 Thread Rusty Burchfield
On Sat, Feb 18, 2012 at 10:12 AM, Thomas Gries wrote: > Can you confirm ? I think the real problem is that $wgResourceLoaderMaxQueryLength is insufficient for the configuration you desire. It only loosely correlates with the problem it seems intended to resolve. Assuming both the number of key/

Re: [Wikitech-l] New Extension in SVN: Suhosin (for the Hardenend-PHP versions with Suhosin extension)

2012-02-18 Thread Thomas Gries
Regarding my extension for dynamic adaption of $wgResourceLoaderMaxQueryLength in accordance to current suhosin parameter in php.ini it is correct to assume such a format http://example.com/?name1=value1&name2=value2&name3=value3 i.e. $wgResourceLoaderMaxQueryLength = the max. total length

Re: [Wikitech-l] New Extension in SVN: Suhosin (for the Hardenend-PHP versions with Suhosin extension)

2012-02-16 Thread Thomas Gries
Hello, the extension has been also published with the intention that those who feel competent improve it. signature.asc Description: OpenPGP digital signature ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mai

Re: [Wikitech-l] New Extension in SVN: Suhosin (for the Hardenend-PHP versions with Suhosin extension)

2012-02-16 Thread Rusty Burchfield
On Thu, Feb 16, 2012 at 4:41 PM, Thomas Gries wrote: > Am 17.02.2012 01:38, schrieb Rusty Burchfield: >> On Thu, Feb 16, 2012 at 3:54 PM, Thomas Gries wrote: >>> Basically, after some checks, it sets >>> $wgResourceLoaderMaxQueryLength=min($wgResourceLoaderMaxQueryLength,ini_get("suhosin.get.max_

Re: [Wikitech-l] New Extension in SVN: Suhosin (for the Hardenend-PHP versions with Suhosin extension)

2012-02-16 Thread Thomas Gries
Am 17.02.2012 01:38, schrieb Rusty Burchfield: > On Thu, Feb 16, 2012 at 3:54 PM, Thomas Gries wrote: >> Basically, after some checks, it sets >> $wgResourceLoaderMaxQueryLength=min($wgResourceLoaderMaxQueryLength,ini_get("suhosin.get.max_name_length")); > I corrected that already, it must be suho

Re: [Wikitech-l] New Extension in SVN: Suhosin (for the Hardenend-PHP versions with Suhosin extension)

2012-02-16 Thread Rusty Burchfield
On Thu, Feb 16, 2012 at 3:54 PM, Thomas Gries wrote: > Basically, after some checks, it sets > $wgResourceLoaderMaxQueryLength=min($wgResourceLoaderMaxQueryLength,ini_get("suhosin.get.max_name_length")); That doesn't look right. http://www.hardened-php.net/suhosin/configuration.html#suhosin.get.m

[Wikitech-l] New Extension in SVN: Suhosin (for the Hardenend-PHP versions with Suhosin extension)

2012-02-16 Thread Thomas Gries
For the Hardenend-PHP versions with Suhosin extension, I wrote a tiny extension https://www.mediawiki.org/wiki/Extension:Suhosin which is easier to link into LocalSettings for those who need it. Basically, after some checks, it sets $wgResourceLoaderMaxQueryLength=min($wgResourceLoaderMaxQueryLen