Magento fix for parse_str() bug in CategoryController

CategoryController.partial.php

/**
 * Addresses this bug: http://www.magentocommerce.com/bug-tracking/issue/?issue=13203
 *
 * See app/code/core/Mage/Adminhtml/controllers/Catalog/CategoryController.php
 * Mage_Adminhtml_Catalog_CategoryController::saveAction(), starting around
 * line 307
 */
if (isset($data['category_products']) &&
    !$category->getProductsReadonly()) {
    $products = array();

    // This can be a massive request -- i.e., all product IDs in this category.
    // So we need to step through this instead of calling parse_str(), which can
    // run up against the max_input_vars limit.
    // parse_str($data['category_products'], $products);

    $cat_products_split = explode('&', $data['category_products']);
    foreach($cat_products_split as $row)
    {
        $arr = array();

        // This will always work.
        parse_str($row, $arr);

        list($k, $v) = each($arr);
        if (!empty($k) && !empty($v))
        {
            $products[$k] = $v;
        }
    }

    if (!empty($products))
    {
        $category->setPostedProducts($products);
    }
}

I'm using Magento 1.8 and I have solved the problem with a modification in

app/code/core/Mage/Adminhtml/controllers/Catalog/CategoryController.php

changing parse_str($data['category_products'], $products);

to:

            $cat_products_split = explode('&', $data['category_products']);
            foreach($cat_products_split as $row) {
            $arr = array();
            parse_str($row, $arr); //This will always work
            list($k, $v) = each($arr);
            if (!empty($k)) {
            $products[$k] = $v;
            }
            }

now it works fine.