httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Martucci, Andy" <AMartu...@Premierfarnell.com>
Subject RE: [users@httpd] CGI Apache Directive: LimitRequestLine
Date Wed, 25 Nov 2009 09:28:07 GMT
Hi Phil

Alas that isn't possible... there is a constraint in Apache that limits this to 8190... see
following help text from Apache:

Maximum request line: allows you to reduce the limit on the allowed size of a client's HTTP
request-line below the normal input buffer size compiled with the server. Since the request-line
consists of the HTTP method, URI, and protocol version, this option restricts the length of
the request-URI. A server needs this value to be large enough to hold any of its resource
names, including any information that might be passed in the QUERY_STRING part of a GET request.
This option gives the server administrator greater control over abnormal client request behavior,
which may be useful for avoiding some forms of denial-of-service attacks. Under normal conditions,
the value should not be changed from the default. Valid values include integers between 0
and 8190. The first drop-down menu specifies units of memory. The second drop-down menu provides
the options: 

Default: places 8190 in the edit field and "Bytes" in the first drop-down menu. 
Maximum: places 8190 in the edit field and "Bytes" in the first drop-down menu.

This field is optional. Directive: LimitRequestLine

Regards, Andy.

-----Original Message-----
From: Philip Wigg [mailto:phil@philipwigg.co.uk]
Sent: 25 November 2009 09:23
To: users@httpd.apache.org
Subject: Re: [users@httpd] CGI Apache Directive: LimitRequestLine


> However, the problem we have stumbled onto is the maximum size of the query
> string that we can use... this is limited to 8190 bytes... I believe this is
> a "Directive" constraint in Apache called: LimitRequestLine
>
> We understand that there isn't such a limit using a "post" request but
> before we re-develop everything we have done we wanted to make sure that
> there wasn't anything we could do to get around the constraint I have just
> mentioned. We would be looking at a maximum size more in the region of 32k.

8190 bytes is the default but you increase it by specifying a larger
limit in your httpd.conf. Putting something like:-

LimitRequestLine 32768

should do it if that's all the problem is.

Cheers,
Phil.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org



Click on the link below to report this email as spam.
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== 


***************************Disclaimer*************************** 
The contents of this e-mail and any file transmitted with it are confidential and intended
solely for the individual or entity to whom they are addressed.  The content may also contain
legal, professional or other privileged information. If you received this e-mail in error,
please destroy it immediately.  You should not copy or use it for any purpose nor disclose
its contents to any other person. The views stated herein do not necessarily represent the
view of the Company. Please ensure you have adequate virus protection before you open or detach
any documents from this transmission. The Company does not accept any liability for  viruses.
Premier Farnell plc
150 Armley Road Leeds
LS12 2QQ
Telephone +44 (0) 870 129 8608
Fax +44 (0) 870 129 8610 
Registered in England
Company Number 876412
Registered Office: Farnell House, Forge Lane, Leeds LS12 2NE ************************************************************



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message