[Koha-bugs] [Bug 4042] Public OPAC search can fall prey to web crawlers

[bugzilla-daemon at kohaorg.ec2.liblime.com]

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4042





--- Comment #5 from Rick Welykochy <rick at praxis.com.au>  2010-01-15 09:16:09 ---
Ken has a good idea. Allow the GET request to be processed, but show the
original page, not the search results.

To make things easier for the genuine Koha user, i.e. one who will then
actually click on the search button (POST) rather than try a GET, populate the
form with the query parameters form the GET request it finds in the URL. 

This saves the user from entering them again. Painless and simple.

Overall this is looking like a good strategy to keep misbehaved bots at bay.

All this is best done in a subroutine residing somewhere in the C4 lib
subdirectory so that it can be used anywhere necessary in Koha. Some admins
configure Koha to allow public access to other parts of the OPAC as well. 


-- 
Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.