• So i noticed this because i use custom code to remove the overlay with the loading icon that you use by default on your filters when loading (which doesn’t let you click on the next filter until the first one you clicked is loaded). When disabling the loading overlay what happens is that it gives the user the ability to spam click filters and load the site/database with requests slowing it down or even breaking the site some times.

    As you understand this shouldn’t be a plugin problem since it happens only when you touch stuf and change plugin functionality customizing it like i did. Though…the issue doesn’t only apply to the ones that customize and remove the overlay. I tried testing on your demo and i was able to abuse this on your demo too. I simply removed your loading overlay by pasting this simple css in the inspector:
    <style>.bapf_loader_page{display:none;}</style>

    Then i simply started spam clicking every filter ??
    I was also able to open multiple windows and do it because by spamming masasively on one window gave me time to spam on the next windows since it took a lot of time to process 100+ spam requests.

    This is an easy way to abuse sites with your filters if you are a malicious user.

    What would be good is an option where you can limit the requests per seconds/minutes to the database or so..

    Check it out.

Viewing 1 replies (of 1 total)
  • Plugin Author RazyRx

    (@razyrx)

    Hello,

    To process spam requests to your site any links can be used, not only filters and it must be some functionality on server, that will recognize this and stop execute this request at all.

    In most cases malicious users will use some tool to send a lot of requests to your server and there is no difference what plugin it has installed.

    There is no way to change how it work on plugin or WordPress level.

    Regards,
    Oleg

Viewing 1 replies (of 1 total)
  • The topic ‘Filters could be abused to break or slow down site’ is closed to new replies.