Unreasonable Site Behavior

Website URL

http://langkah-kaki.rf.gd/aplikasi/inbound

Error Message

419 | Page Expired

Other Information

Occurs when sending a lot of information (Content-Length: 99659) from an html form.
But this doesn’t happen if there is little information(Content-Length: 83) sent.

code something like when $_post [ submit ] > if strlen (username) or strlen (pwd) >= 32 then echo “how many fkin names youve got?” then die()

What ???

I already tested on more larger data and found that everthing still fine around Content-Length: 13518, but not after more data being sent.

My Application created using Laravel

I am saying to manually code the PHP script to do exactly this:
WHEN “submit button clicked” THEN DO {
if strlen(USER FORM) or strlen(PASSWORD) exceed A HUMAN LENGHT{
echo “error”;
die();
}
}
conceptually is not that difficult, even chatgpt could probably code it for you

Can you please be more detailed about the issue you are facing?

If you go to that page and input an extreme long sequence of characters in the $_post forms, the php crashes and returns a http error 419 page expired… could easily truncate the process using strlen on input

In the login page?

Hi SuryaTanamas,

Error 419 relates to CSRF token, a security feature in Laravel forms that prevents replay attack on your website.

As you have mentioned that site behaviour varies by the submission size, it’s very likely that you have placed @csrf at the end of the form, making it one of the last parameters that gets submitted. When you attempt to post a lot of things at once and exceed the max_post_vars directive, subsequent values get dropped and very likely one of them is the CSRF token. Once the token’s gone, Laravel cannot validate your submission being fresh enough and you’ll get a 419.

Reduce your submission size by making it go through more screens and update items by part instead of all at once.

Cheers!

9 Likes

is not about login form, sir.
is about form submit…

Try to access my application using this login :
Username : Forum
Password : infinityfree

1 Like

about some form inside my aplication, sir

This has not happened before and as far as I remember it has only happened in the last 36 hours

Hi SuryaTanamas,

It might be related to a recent PHP issue here:

5 Likes

Hey, there’s been an issue with the PHP for almost 18 hours

1 Like

In the “email invalid” page, if you put random things into the form, it returns an error page with

ErrorException
PHP 8.2.12
10.24.0
Undefined variable $hasil

in App \ Libraries \ MyEmail: 34 getEmail

This has not happened before

require spesific input

Please understand that the system is having some issues at the moment; we can’t do anything about them. So be tight and hang in there while the admin fixes it.

5 Likes

thanks for information and explanation

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.