From 5e82f74005b3778db45a08e4faa548590d3422ac Mon Sep 17 00:00:00 2001 From: Mark Crane Date: Mon, 20 May 2013 11:38:58 +0000 Subject: [PATCH] This fixes a problem where non-existent domains could cause the lua script to fail which would then leave the database connection open and eventually lead to denial of service when the database runs out of connections. Everyone using xml handler needs this update. --- .../xml_handler/resources/scripts/directory/directory.lua | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua b/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua index 8d57f35472..e83900c42d 100644 --- a/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua +++ b/includes/install/scripts/app/xml_handler/resources/scripts/directory/directory.lua @@ -85,6 +85,11 @@ continue = false; end + --prevent processing for invalid domains + if (domain_uuid == nil) then + continue = false; + end + --get the extension from the database if (continue) then sql = "SELECT * FROM v_extensions WHERE domain_uuid = '" .. domain_uuid .. "' and extension = '" .. user .. "' and enabled = 'true' ";