? J3 Issue
avatar fredo-m
fredo-m
29 Oct 2018

Hi,

This is a small bug that deserves protection against awkwardness.

In the module "Feed Display", if in the field "Feed URL" you put the address of the site, you generate a loop that consumes all possible access to the web server. On a web server you use all processes up to the maximum limit, a small DOS.

Tested with Joomla 3.8.1.

Regards.

Votes

# of Users Experiencing Issue
1/1
Average Importance Score
2.00

avatar fredo-m fredo-m - open - 29 Oct 2018
avatar joomla-cms-bot joomla-cms-bot - labeled - 29 Oct 2018
avatar brianteeman brianteeman - change - 30 Oct 2018
Labels Added: J3 Issue
avatar brianteeman brianteeman - labeled - 30 Oct 2018
avatar brianteeman brianteeman - change - 30 Oct 2018
Labels Removed: J3 Issue
avatar brianteeman brianteeman - unlabeled - 30 Oct 2018
avatar brianteeman brianteeman - unlabeled - 30 Oct 2018
avatar brianteeman brianteeman - change - 30 Oct 2018
Labels Added: J3 Issue
avatar brianteeman brianteeman - labeled - 30 Oct 2018
avatar brianteeman
brianteeman - comment - 30 Oct 2018

Do you mean you put your own url in the module?

If so its hardly a DOS as you did it yourself

avatar fredo-m
fredo-m - comment - 31 Oct 2018

Hi,

Yes, we have a client on a shared server that wanted to test the module. Not knowing what to put as URL, she put that of her website. She made inaccessible all the websites of this shared server .

Regards.

avatar brianteeman
brianteeman - comment - 31 Oct 2018

So this shared server doesn't run each site in isolation?

avatar fredo-m
fredo-m - comment - 31 Oct 2018

With the Apache prefork MPM module, the "MaxRequestWorkers" directive is global, it can not be configured vhost by vhost.

Regards.

avatar franz-wohlkoenig franz-wohlkoenig - change - 4 Mar 2019
Status New Discussion
avatar Quy
Quy - comment - 21 May 2019

Isn't this a hosting/user issue than a core issue?

avatar alikon
alikon - comment - 21 May 2019

hosting issue for me

avatar brianteeman
brianteeman - comment - 21 May 2019

The only thing we could do is to prevent someone putting in a link to their own site.

avatar Quy
Quy - comment - 21 May 2019

You should be able to post your own site. I tested locally without issues.

avatar joomla-cms-bot joomla-cms-bot - change - 21 May 2019
Status Discussion Closed
Closed_Date 0000-00-00 00:00:00 2019-05-21 15:38:55
Closed_By joomla-cms-bot
avatar joomla-cms-bot joomla-cms-bot - close - 21 May 2019
avatar alikon alikon - change - 21 May 2019
Closed_Date 2019-05-21 15:38:55 2019-05-21 15:38:56
Closed_By joomla-cms-bot alikon
Labels
avatar joomla-cms-bot
joomla-cms-bot - comment - 21 May 2019

Set to "closed" on behalf of @alikon by The JTracker Application at issues.joomla.org/joomla-cms/22854

avatar alikon
alikon - comment - 21 May 2019

not a core issue


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/22854.

Add a Comment

Login with GitHub to post a comment