Why not simply use robots.txt, its is made for this, no ?<br><br><div class="gmail_quote">On Sun, Jan 8, 2012 at 02:07, Caleb James DeLisle <span dir="ltr">&lt;<a href="mailto:calebdelisle@lavabit.com">calebdelisle@lavabit.com</a>&gt;</span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I noticed <a href="http://xwiki.org" target="_blank">xwiki.org</a> lagging and java process using lots of cpu, although ram was high it didn&#39;t seem to be a major issue.<br>


I noticed this:<br>
180.76.5.100 - - [07/Jan/<a href="tel:2012" value="+3522012">2012</a>:21:13:00 +0100] &quot;GET /xwiki/monitoring?part=graph&amp;graph=sql34bb8b9d9f525e0790dab487491d120d4bc685cd&amp;period=annee HTTP/1.1&quot; <a href="tel:500%20398" value="+352500398">500 398</a> &quot;-&quot; &quot;Mozilla/5.0 (compatible; Baiduspider/2.0; +<a href="http://www.baidu.com/search/spider.html" target="_blank">http://www.baidu.com/search/spider.html</a>)&quot;<br>


<br>
And seeing as it seems you can do things like heap dump and run garbage collector with get requests, that page should probably be made difficult to access.<br>
One idea that comes to mind would be using mod_rewrite to change the url if there is no auth cookie set so any logged in user can view it but a roving bot can&#39;t.<br>
<br>
Caleb<br>
<br>
_______________________________________________<br>
infra mailing list<br>
<a href="mailto:infra@xwiki.org">infra@xwiki.org</a><br>
<a href="http://lists.xwiki.org/mailman/listinfo/infra" target="_blank">http://lists.xwiki.org/mailman/listinfo/infra</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Denis Gervalle<br>SOFTEC sa - CEO<br>eGuilde sarl - CTO<br>