From cbbb7250c1e0a027a3dc8c071c48bf2ff4931ab3 Mon Sep 17 00:00:00 2001 From: Mark Crane Date: Mon, 20 May 2013 11:38:58 +0000 Subject: [PATCH] This fixes a problem where non-existent domains could cause the lua script to fail which would then leave the database connection open and eventually lead to denial of service when the database runs out of connections. Everyone using xml handler needs this update. --- .../xml_handler/resources/scripts/directory/directory.lua | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua b/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua index 8d57f35472..e83900c42d 100644 --- a/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua +++ b/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua @@ -85,6 +85,11 @@ continue = false; end + --prevent processing for invalid domains + if (domain_uuid == nil) then + continue = false; + end + --get the extension from the database if (continue) then sql = "SELECT * FROM v_extensions WHERE domain_uuid = '" .. domain_uuid .. "' and extension = '" .. user .. "' and enabled = 'true' ";