[development] Possible security issue in Drupal with previous/next thread in forum

Jean-Michel Pouré jm at poure.com
Wed Aug 26 15:44:24 UTC 2009

Dear all,

I hope that this is the right place to post.

My issue http://drupal.org/node/559424
was closed with a "Wron't fix" answer.

On my server, a query returns 21000 rows in 7412 ms.
Just to be able to display previous and next forum thread.
The number of rows seems too large.

I double-checked on my testing server with 650.000 posts and the devel
module + pgadmin3.

Kind regards,
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Ceci est une partie de message num?riquement sign?e
URL: <http://lists.drupal.org/pipermail/development/attachments/20090826/883df510/attachment.pgp>

More information about the development mailing list