currently there is no limit how many messages a user can have stored in
silo table.  this is clearly a big dos security problem that needs to be
fixed.  

i suggest to add a module parameter max_message_count or something like
that.  the downside is that m_store will require two db operations, but
there is nothing we can do about that.

comments?

-- juha


_______________________________________________
Devel mailing list
[email protected]
http://openser.org/cgi-bin/mailman/listinfo/devel

Reply via email to