[support] Spammers filling sessions table

Jeremy Andrews lists at kerneltrap.org
Wed Mar 29 16:30:59 UTC 2006


On Wed, 29 Mar 2006 11:21:27 -0500
Morbus Iff <morbus at disobey.com> wrote:

> > solved this by introducing form tokens on comments.  I've
> > created a patch for Drupal 4.6.6, attached (untested).
> 
> I don't think this is happening anymore in 4.7 - I could be
> wrong, but there was a bunch of talk about how the tokens
> were failing with cached pages (the same token being set on
> a cached comment form, and then failing the validation
> checks when it came time to Preview/Subnit).

Fortunately that bug was fixed:
http://drupal.org/node/51303

Cheers,
 -Jeremy


More information about the support mailing list