[Devel] msilo dos

Juha Heinanen jh at tutpro.com
Sun Sep 10 20:59:48 CEST 2006


currently there is no limit how many messages a user can have stored in
silo table.  this is clearly a big dos security problem that needs to be
fixed.  

i suggest to add a module parameter max_message_count or something like
that.  the downside is that m_store will require two db operations, but
there is nothing we can do about that.

comments?

-- juha




More information about the Devel mailing list