[Bug 42338] New: Empty patron searches should not be allowed
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42338 Bug ID: 42338 Summary: Empty patron searches should not be allowed Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Patrons Assignee: koha-bugs@lists.koha-community.org Reporter: lucas@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com, kyle@bywatersolutions.com To recreate: 1. Go to Patrons > Patron search 2. With out adding any characters to "Search:" click "Search" 3. The search runs and returns every patron. This should not be allowed. Doing an empty/unfettered search can tax larger systems and even bring them down if too many of these kind of searches are ran concurrently. Forcing staff to add at least 1 character seems reasonable. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42338 --- Comment #1 from Lucas Gass (lukeg) <lucas@bywatersolutions.com> --- If combined with the fact that you can "Save configuration state" on this table and choose to return 'All' results on a single page it can make for some very taxing searches. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42338 --- Comment #2 from Tristin Stagg <tristin.stagg@bywatersolutions.com> --- Akron-Summit Koha incidents (April 10, 2026) - two separate OOM killer events caused by unbounded patron API queries (per_page=-1) from staff using Edge browser. Slack threads: https://bywater.slack.com/archives/CAMRMP9PV/p1775839029566789 https://bywater.slack.com/archives/CAMRMP9PV/p1775848927876979. Root cause: Bug 40901 (lack of process isolation) enables these OOM killer events to be silent and untraceable. Resolution: JavaScript validation to prevent empty searches implemented by Lucas Gass. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42338 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=41040 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42338 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |DUPLICATE Status|NEW |RESOLVED --- Comment #3 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- *** This bug has been marked as a duplicate of bug 41048 *** -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org