FUDforum: Bug Reports » INSERTions into ses table for unknown users

Home » FUDforum Development » Bug Reports » INSERTions into ses table for unknown users (Fantom sessions?)

Show: Today's Messages :: Polls :: Message Navigator

Re: INSERTions into ses table for unknown users [message #168075 is a reply to message #168074]

Tue, 15 January 2013 15:26

NeXuS
Messages: 121
Registered: July 2010
Location: South Korea

Karma:

Senior Member
Contributing Core Developer

Ok, two things:

1. The version you are running is outdated. The latest released version has a different session table, so the sessions also track the user's IP and user agent.
2. I am starting to think that the best way to prevent this kind of attack would be to configure your firewall correctly and limit the maximum rate of connections allowed from a single IP address (or even do temporary or permanent IP bans). I am saying this because the sysid is the same for all your logs. You should update FUDf, track down the IP and block it.

On a sidenote, the function definitely needs reworking to avoid doing an INSERT even if the key parameters are the same (e.g. IP, useragent and sysid). I will work on a patch.

[Updated on: Tue, 15 January 2013 15:27]

Report message to a moderator

[Message index]

		INSERTions into ses table for unknown users By: San ??????? on Tue, 08 January 2013 17:00
		Re: INSERTions into ses table for unknown users By: Marticus on Tue, 08 January 2013 18:08
		Re: INSERTions into ses table for unknown users By: San ??????? on Tue, 08 January 2013 20:59
		Re: INSERTions into ses table for unknown users By: San ??????? on Wed, 09 January 2013 01:33
		Re: INSERTions into ses table for unknown users By: San ??????? on Wed, 09 January 2013 02:14
		Re: INSERTions into ses table for unknown users By: NeXuS on Tue, 15 January 2013 15:00
		Re: INSERTions into ses table for unknown users By: NeXuS on Tue, 15 January 2013 15:26
		Re: INSERTions into ses table for unknown users By: NeXuS on Tue, 15 January 2013 17:19

Previous Topic:	CKEditor conflicts with default formatting tools
Next Topic:	Censorship bug

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri May 10 09:41:34 GMT 2024

Total time taken to generate the page: 0.06019 seconds