#14707 [Com]: A very serious PHP bug that can turn down almost any web server !!!

From: Date: Thu, 25 Dec 2003 00:38:00 +0000
Subject: #14707 [Com]: A very serious PHP bug that can turn down almost any web server !!!
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-52474@lists.php.net to get a copy of this message
ID: 14707 Comment by: jokko at yahoo dot com Reported By: sorin at sorin dot tv Status: Bogus Bug Type: Scripting Engine problem Operating System: Any OS, any PHP version PHP Version: 4.1.0 New Comment: I was trying a feature that creates several threads at www.jokko.com and I think you only have this type of problem, if you create a very small script on a very fast server. Previous Comments: ------------------------------------------------------------------------ [2002-01-12 19:17:24] daniel@php.net I already told you by private mail, sorin, that this is the responsibility of the PROGRAMMER, not the language itself. your request sounds like "please remove unlink() from PHP, it allows people to destroy data". It's YOUR responsibility to develop a site structure which doesn't take down your whole server just because more than 10 people visit it at the same time. Feel free to discuss this topic with me privately. It doesn't belong here at all. Kind Regards, Daniel Lorch ------------------------------------------------------------------------ [2002-01-12 18:24:14] sorin at sorin dot tv By "limiting the amount of connections for an IP" as you said is NOT a solution. Let's say my script intergogates a database or open a file on the web like $a=file("http://example.com/news.txt"); then if you set the maximum no. of connections and my site has many visitors (several a sec), then your solution is not reliable. I belive a better solution is the one above, plus even if you set the max no of connections to 2, I can make the script above run forever in 2 instances, even if you close your browser and maximum execution time is only one sec. Just tested it. Sorin Facaoaru - Sorin Media Inc. ------------------------------------------------------------------------ [2002-01-12 16:19:28] sorin at sorin dot tv You must design the PHP scripting language in such way so everytime a script ends (naturaly or forced), the PHP server must close all open socket connections of the ending script by sending a TCP closing request (FIN) to every opened socket. Also, the server administrator should have the power to set the maximum simultaneous socket connections for each server account. Sorin Facaoaru - Sorin Media Inc. ------------------------------------------------------------------------ [2001-12-26 19:08:07] daniel@php.net here's another discovery: while(true) mail("sorin@sorin.tv", "this is a mailbomb", "blub"); ------------------------------------------------------------------------ [2001-12-26 19:06:19] daniel@php.net I forgot to /bogus ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/14707 -- Edit this bug report at http://bugs.php.net/?id=14707&edit=1

« previous php.bugs (#52474) next »