Password Protected and iPad to many requests
-
When using this plugin and I login on a Password Protected page using iPad, then Apache is bombarded with a DOS alike attack with apache requests like this:
xx.xx.xx.xx – – [15/Apr/2014:13:28:51 +0200] “GET /xxx/xxx/?password-protected=login&redirect_to=http%3A%2F%2Fwww.xxx.com%2Fxxx%2Fxx%2Fxxx%2F1-10-html5%2Fxxx%2F1o.wav HTTP/1.1” 206 657 “-” “AppleCoreMedia/1.0.0.11D167 (iPad; U; CPU OS 7_1 like Mac OS X; nb_no)”
This is one line from Apache Usage Log, when using iPad and your plugin, this line is repeated about 100 times in Apache Usage Log within a time frame of 1 minute. So to make myself clear, only the first line/request should happen, but then even though I am not active on the site, it continue to make Apache requests with 100 requests in 1 minute.
Have anybody else seen this? It takes up a lot of CPU time when a user is active on the site using iPad.
(I have edited the url from the log file by replacing content of ip and names in url with xxx)
- The topic ‘Password Protected and iPad to many requests’ is closed to new replies.
