Sessions Table Filled

[TRN]

This notice is for individuals who hit the forum portion of the website, received an error, and then wondered what happened.

At approximately 2:30 PM PST someone from Hong Kong decided to abuse the website. They filled the Sessions table for the PHPBB2 database. This creates an error that says "Error in creating a new session" for anyone attempting to use PHP BB2.

There were approximately 12,000 requests done before I had the table repaired and the IP address identified. I have cleared the table, added php code to limit the number of sessions one IP address may have with PHP BB2, and also sent a message to the ISP responsible for filling the table.

You will notice in the Penguin Chat my request for the individual to stop. They ignored me until I published the number. In fact, the "requests from the IP" stopped 3 minutes after I published the Hong Kong phone number. I guess they didn't believe me when I posted that I knew the IP address. After all, it isn't too hard to check an access log. It also isn't too difficult to figure out the IP address when it has made over 12,000 requests in a short time period.

:roll:

Sorry for the inconvenience.

If you are using Apache, you can add a config line to block that IP from reaching the site... they just get a page saying, "Forbidden". Even better, block them with a firewalling rule. That way they don't even reach the web server, or anything else for that matter.

*TheDarb
PCLinuxOnline.com / Eastwind.net

[TRN]

If you are using Apache, you can add a config line to block that IP from reaching the site... they just get a page saying, "Forbidden". Even better, block them with a firewalling rule. That way they don't even reach the web server, or anything else for that matter.

*TheDarb
PCLinuxOnline.com / Eastwind.net

Hey Darb,

Yep, we talked about a firewall rule. I think, though, public humiliation is a good strategy too :twisted:

OK. Maybe politeness should rein. Even though it would be more fun to fire back at the bonehead. :roll: