Ticket #1629 (new defect)

Opened 4 months ago

Last modified 3 months ago

mod_accesslog does not log aborted POSTs

Reported by: icy Assigned to: jan
Priority: normal Milestone: 1.5.0
Component: mod_accesslog Version: 1.4.19
Severity: normal Keywords:
Cc: Blocking:
Need Feedback: 0

Description

If the client issues a POST and closes the connection before finishing the request, it will not get logged. While I am not sure if it should be logged, this might pose minor security risks of having lighty webservers abused for upload speed tests.

Attachments

Change History

05/04/2008 12:00:12 PM changed by stbuehler

connections.c: 

		case CON_STATE_ERROR: /* transient */

			/* even if the connection was drop we still have to write it to the access log */
			if (con->http_status) {
				plugins_call_handle_response_done(srv, con);
			}

I am not sure if we can call handle_response_done anyway - but you can try it if you want ;-)

Add/Change #1629 (mod_accesslog does not log aborted POSTs)




Change Properties