Notice: We are now selling NEW Gelbooru Merch~! Domestic shipping is free on all orders! Do you have an artist tag on Gelbooru? Let us know so we can properly credit you!

Ticket Information - ID: #792

ID:Category:SeverityReproducibilityDate SubmittedUpdated By:
0000792Bug ReportingHighalways05/13/15 08:21PMStarBuster
Assigned to:geltas
View StatusPublic
Target Version:N/A
Summary:Restrict public access to optimize_defrag.php
Description:In the version 0.1.11 it is possible to execute the file optimize_defrag.php for everyone which will not only start the DB optimization but also output all of the table names in DB (even those which are not related to the platform, since the script uses the table names returned by the command "SHOW TABLE STATUS"). This still seems to be possible in v2.5 on the domain (the response takes some time to come back, so I guess it does really do something), although it results in a 504 Gateway Time-out error. Sorry, I hope I didn't broke anything (I really didn't wanted to call it here (I use a loopback domain in my hosts file which is similar to your domain and it was a typing error...)). But this might be used to overload the server.
Additional Info:
lozertuser replied at 2015-05-13 20:37:40
Nah, it doesn't break anything. You can just delete that file since it's not really needed.

StarBuster replied at 2015-05-13 20:48:31
Ok. I got a little panic, since after I called the file accidentially on the domain here, it wasn't available for some seconds (the server returned always only a blank page). I'm glad that nothing bad happened.