[wp-trac] [WordPress Trac] #25141: wordpress 3.6 fails to receive more than one pingback at once.

WordPress Trac noreply at wordpress.org
Mon Sep 9 20:40:50 UTC 2013


#25141: wordpress 3.6 fails to receive more than one pingback at once.
------------------------------+------------------
 Reporter:  privolus          |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.7
Component:  Pings/Trackbacks  |     Version:  3.3
 Severity:  normal            |  Resolution:
 Keywords:  has-patch         |
------------------------------+------------------

Comment (by nacin):

 When comment flood protection is triggered, does that mean we actually
 issue a wp_die() and fire _xmlrpc_wp_die_handler()?

 This is one of the more amusing bugs I've seen recently. But it is not so
 straightforward.

 I'd actually like to suggest that this behavior is actually not entirely
 unreasonable. I don't want someone to use a single post to attempt to post
 a pingback on every single post I've ever written. It could also become a
 backdoor for DOS attacks. But, I'm going to guess our application of
 comment flood protection for pingbacks is actually completely accidental.

 There are possibly a few things we could do here. My initial reaction
 would be to consider allowing multiple comments rapidly if the comment is
 a ping, but still within reason — say, three or four.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25141#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list