------ Original Message ------
From: "Richard Hipp" <[email protected]>
To: "fossil-users" <[email protected]>
Sent: 11/26/2011 10:26:47 AM
Subject: [fossil-users] Automatically enabled hyperlinks
When you visit
http://www.fossil-scm.org/fossil/timeline
You should automatically see all of the hyperlinks without having to
log in as anonymous. If this is not the case, then please send me a
snapshot of http://www.fossil-scm.org/fossil/test_env via private
email. Thanks.
This worked for me on Windows 7 testing with Chrome 15, Firefox 7 and
IE 9 (my default browser).
...snip...
The automatic humanness detector has actually been in Fossil for
several weeks and seems to have been working pretty well. But
yesterday, the Systrix web crawler was misclassified as human and
caused a surge in the server load, so I had to adjusted the
discriminator algorithm.
I wonder if you cannot use an adaptive technique of checking the last
access time? For example, a human doesn't click around at a rate of 20
links per second. If the client is deemed a user but you notice, maybe
after the 5th request that they are coming much too quickly to be a
human, revert them to a bot status. This would likely require some
fancy time handling as not to pollute the db with a full access log and
also a user state variable for that particular login stating "human" or
"person" but if it continues to be a problem, it could be a pretty safe
and secure fix not penalizing humans nor potentially opening up your
server to a flood, even with a rouge bot that identifies itself as a
legit browser. You could have a "last access" time and "rapid request
count" field in a "bot track" table linked to the user. If the last
access time is < 500ms ago, increment the rapid request count. If the
last access time is > 500ms, decrease the rapid request count. If the
rapid request count hits a predefined threshold, say 5 or 10, flip the
user to a bot status disabling links... Just an idea.
Jeremy
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
