[Koha-bugs] [Bug 19811] New: Preventing runaway processes bringing down Koha

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19811

            Bug ID: 19811
           Summary: Preventing runaway processes bringing down Koha
 Change sponsored?: ---
           Product: Koha
           Version: 17.05
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Architecture, internals, and plumbing
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: r.delahunty at arts.ac.uk
        QA Contact: testopia at bugs.koha-community.org

We just had a complete Koha outage which we believe was caused by 150+ requests
to /cgi-bin/koha/circ/returns.pl sent simultaneously. Apparently this could
have been caused by someone on the issue desk accidentally pressing the resend
key. Our server support people have to kill the processes, presumably via the
command line. 
It would be very easy to trigger repeated calls to returns.pl (and I guess
other scripts) by accidently resting a book (or whatever) on the edge of the
keyboard, catching the Enter key. Just now I was able to bring down our test
system (both intranet and OPAC) by merely holding down the enter key (using
returns.pl) for maybe a maximum of 5-7 seconds. This a serious vulnerability,
where a momentary lapse of care with a book on a keyboard can crash the Koha
system. 

Ray Delahunty
University of the Arts London

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.