[Vtigercrm-developers] Comments on Leads

Adam Heinz amh at metricwise.net
Tue Apr 3 17:47:06 PDT 2012


On Tue, Apr 3, 2012 at 5:45 PM, Rohit Thakral <thakralrohit at gmail.com> wrote:
> I have checked the max_input_vars there is no value stored in the php.ini
> file.

Hi Rohit

Assuming you're running RHEL or CentOS or some other distribution that
back ports security fixes, a package update would have picked up the
fix to the following problem earlier this year.  TLDR: A high
max_input_vars value allows DOS attacks.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4885

This fix reduced the php default max_input_vars value, which in my
case, caused a batch submission form to stop working because it
submitted so many values all at once.  You can check the new default
from the command line with

php -r "echo ini_get('max_input_vars');"

---

All that said, I think that is only one possible cause of your problem
described in OP.  Is it possible that the ModComments module isn't
enabled?



More information about the vtigercrm-developers mailing list