Contrib.social

Prevent event logs from flooding

Open on Drupal.org →
Created on 15 March 2023, over 1 year ago
Updated 22 May 2023, over 1 year ago

Problem/Motivation

event_log_track_auth sub module would recored every single password request by an anonymous. This feature would be taken advantage to flood event logs.

Steps to reproduce

  • Install event_log_track_auth module.
  • Go to password reset page (/user/password) as an anonymous to reset the password for any account, even if it doesn't exist.
  • An event log will be created for this action.

Proposed resolution

Only log authenticated user's action for resetting password.

Remaining tasks

N/A

User interface changes

N/A

API changes

N/A

Data model changes

N/A

🐛 Bug report
Status

Fixed

Version

3.1

Component

Code

Created by

🇦🇺Australia mingsong 🇦🇺

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024