On Fri, Sep 27, 2013 at 12:33 PM, Galen Charlton <gmc@esilibrary.com> wrote:
What ended up showing up in my logs was the repeated POSTs to member.pl, though not any GETs of circulation.pl.
Adapting a JavaScript technique [1] to disable multiple form submission prevented holding down on the enter key from spamming patron searches for me. Of course, that's not a bulletproof technique for various reasons, but something like it should probably be part of Koha's toolkit.
A similar issue in Evergreen where holding down on the enter key could spam OPAC searches was addressed by interposing a short-term cache for running search queries so that if a bunch of identical queries arrive, only one of them queries the database while the rest wait for the first to populate the search result cache.