Advanced Gallery DoS on JSON API

  • Creato

    (@creatomatic)


    1 year, 8 months ago

    Hi,

    Please elevate this note to your developers.

    When loading Advanced Gallery in the editor, Kadence makes a request to wp-json/wp/v2/media/x for every image in that gallery, concurrently.

    On galleries with a large number of images, this creates a problem.

    This creates an excessive number of entry processes hitting PHP, which is not suitable for optimised hosting environments. In instances where entry processes are limited, this prevents other aspects of the page loading and renders the edit page inoperable.

    My thoughts on a solution is to assemble the information that you need in one request or to queue your getMedia() requests.

    Best wishes,

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Mark Woodard

    (@woodardmc)

    @creatomatic,

    Can you give us a sense of how many gallery blocks / images you have when you begin to see this behavior?

    If you don’t mind saying, knowing your hosting environment might help with testing as well.

    Lastly, this is mainly an issue with the editor correct? You’re not getting failed page loads on the frontend?

    Mark

    Thread Starter Creato

    (@creatomatic)

    Hi Mark,

    Yes – this is regarding the editor backend.

    As an example, the standard configuration of Cloudlinux is 20 entry processes.

    https://docs.cloudlinux.com/shared/limits/

    So, after 20 images in this setting you might start to see HTTP 508 errors. Remember that it is loading other dynamic scripts too for the editor as well as other site visitors – so actual results will vary.

    Best regards

    Plugin Author Mark Woodard

    (@woodardmc)

    @creatomatic

    Thanks for the info. We’re going to put this on on our list to test and improve.

    Hopefully we can find a good way to reduce the overall number of requests via the gallery block.

    Mark

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Advanced Gallery DoS on JSON API’ is closed to new replies.