lots of "GET variable length limit exceeded"

问题：

120-test:/var/log# more user.log.1
Feb  3 13:41:56 120-test suhosin[27712]: ALERT - configured request variable name length limit exceeded - dropped variable '<br_/><b
>Notice</b>:__Undefined_index:__random_in_<b>/data/webroot/high_iphone_admin/tmp/templates_c/spotfilmcate_addedit_tpl_php</b>_on_lin
e_<b>34</b><br_/>' (attacker '192.168.206.9', file '/data/webroot/high_iphone_admin/webroot/index.php')
Feb  3 14:10:14 120-test suhosin[28424]: ALERT - configured request variable name length limit exceeded - dropped variable '<br_/><b
>Notice</b>:__Undefined_index:__random_in_<b>/data/webroot/high_iphone_admin/tmp/templates_c/spotfilmcate_addedit_tpl_php</b>_on_lin
e_<b>34</b><br_/>' (attacker '192.168.206.9', file '/data/webroot/high_iphone_admin/webroot/index.php')

 

 

解决：

这些log是加密后合理生成的过长的URL，需要将suhosin.get.max_value_length in php.ini调大。

120-test:/var/log# vi /etc/php5/conf.d/suhosin.ini

修改为 suhosin.get.max_value_length = 1024 默认为512