#2698 - Drop per-group flood control settings
| Identifier | #2698 |
|---|---|
| Issue type | Feature request or suggestion |
| Title | Drop per-group flood control settings |
| Status | Closed (rejected) |
| Tags |
Risk: Deprecates functionality (custom) |
| Handling member | Chris Graham |
| Addon | core_cns |
| Description | These settings really are not helpful. A limit for one member may as well apply to any, as if it's too low you'll just annoy your users - and if it's too high you won't block anything. And, having it run after full DB/member bootstrap means a DOS attacker can waste a lot of resources before CMS even knows what the flood limits are.
The new _config.php-configured flood setting system is much better, as it runs before bootstrap and can filter out the real flooders more effectively. Removing the per-group settings will also simplify the system a bit. |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments