Feature #76364

Limit requests for timeout

Added by Nicole Cordes over 4 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
Start date:
2016-05-29
Due date:
% Done:

100%

PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Currently the request to get logout information is sent every 60 seconds. This is not needed as the minimum session lifetime is configured in $GLOBALS['TYPO3_CONF_VARS']['BE']['sessionTimeout']. We can limit the request to that defined value with a minimum of 60 seconds to prevent DOS attacks.

Associated revisions

Revision ab7eee76 (diff)
Added by Nicole Cordes about 4 years ago

[TASK] Limit request to get logout information

Currently a request to get information about the login state is
triggered every minute. To prevent traffic the request can be triggered
only when the session is about to expire. This patch adds a function
to be able to pass the interval time to the LoginRefresh refresh and
sets it properly after initialization.

Resolves: #76364
Releases: master, 7.6
Change-Id: I9bfeb578973f1a5bc3a0f662ac1f6dcce82e7d37
Reviewed-on: https://review.typo3.org/48393
Tested-by: Bamboo TYPO3com <>
Reviewed-by: Helmut Hummel <>
Reviewed-by: Philipp Gampe <>
Tested-by: Philipp Gampe <>
Reviewed-by: Stefan Neufeind <>
Tested-by: Stefan Neufeind <>

Revision 391eaac8 (diff)
Added by Nicole Cordes about 4 years ago

[TASK] Limit request to get logout information

Currently a request to get information about the login state is
triggered every minute. To prevent traffic the request can be triggered
only when the session is about to expire. This patch adds a function
to be able to pass the interval time to the LoginRefresh refresh and
sets it properly after initialization.

Resolves: #76364
Releases: master, 7.6
Change-Id: I9bfeb578973f1a5bc3a0f662ac1f6dcce82e7d37
Reviewed-on: https://review.typo3.org/49685
Tested-by: Bamboo TYPO3com <>
Reviewed-by: Philipp Gampe <>
Tested-by: Philipp Gampe <>

History

#1 Updated by Gerrit Code Review over 4 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/48393

#2 Updated by Gerrit Code Review over 4 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/48393

#3 Updated by Gerrit Code Review over 4 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/48393

#4 Updated by Benni Mack over 4 years ago

  • Target version changed from 8.2 to 8.3

#5 Updated by Gerrit Code Review about 4 years ago

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/48393

#6 Updated by Gerrit Code Review about 4 years ago

Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/48393

#7 Updated by Gerrit Code Review about 4 years ago

Patch set 6 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/48393

#8 Updated by Benni Mack about 4 years ago

  • Target version changed from 8.3 to 8.4

#9 Updated by Gerrit Code Review about 4 years ago

Patch set 1 for branch TYPO3_7-6 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/49685

#10 Updated by Nicole Cordes about 4 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

#11 Updated by Riccardo De Contardi about 3 years ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF