Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-15841

CiviCRM Joomla permissions exceed POST/GET input limits on many servers

    Details

    • Versioning Impact:
      Patch (backwards-compatible bug fixes)
    • Documentation Required?:
      None

      Description

      The Joomla ACL Manager page for CiviCRM permissions ([DOMAIN ROOT]/administrator/index.php?option=com_config&view=component&component=com_civicrm) creates a very large HTML form for the required CiviCRM permissions.

      If submitted, this form will exceed the maximum input length for GET/POST data on many standard PHP installs (typically 1000 characters).

      A workaround is to put (eg)
      php_value max_input_vars 2000
      into an .htaccess file, or edit php.ini

      However seems like an ideal solution would be to somehow reduce the size of the form so it submits fewer than 1000 characters.

      I noted this problem in both 4.5.5 and 4.4.11 (Joomla 3.3.6), although in 4.4.11 it throws a 'security token' error - presumably because the input is cut off without the token. In 4.5.5 it just fails silently and boots the user to the ACL main screen.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              benmoreassynt Roland Tanner
            • Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated: