[support] Spammers filling sessions table

Morbus Iff morbus at disobey.com
Wed Mar 29 16:21:27 UTC 2006


> solved this by introducing form tokens on comments.  I've
> created a patch for Drupal 4.6.6, attached (untested).

I don't think this is happening anymore in 4.7 - I could be wrong, but 
there was a bunch of talk about how the tokens were failing with cached 
pages (the same token being set on a cached comment form, and then 
failing the validation checks when it came time to Preview/Subnit).

-- 
Morbus Iff ( you are nothing without your robot car, NOTHING! )
Culture: http://www.disobey.com/ and http://www.gamegrene.com/
O'Reilly Author, Weblog, Cook: http://www.oreillynet.com/pub/au/779
icq: 2927491 / aim: akaMorbus / yahoo: morbus_iff / jabber.org: morbus


More information about the support mailing list