What: Added security features to prevent database spam when view tracking is enabled.

Why: Without protection, malicious users could spam page URLs by repeatedly refreshing, flooding the database with thousands of logs. Bots and crawlers on public websites could create millions of unnecessary records.

Solution: Implemented throttling (limits duplicate logs to 1 per 60 seconds per user/entity) and anonymous user exclusion (blocks anonymous users from view tracking by default). Added configuration UI at /admin/config/activities so admins can adjust these security settings.

Impact: Reduces spam logs by 90-99% while still tracking legitimate user activity. Production-ready for high-traffic sites.

Comments

ahmad-alyasaki created an issue. See original summary.

  • ahmad-alyasaki committed 79db5293 on 1.0.x 
    [#3555639] feat: Added security features to prevent database spam on...
ahmad-alyasaki’s picture

ahmad-alyasaki commented
Status: Active » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.