Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Partkeepr try to access to remote urls, could it be dangerous? #1265

Open
sruedat opened this issue Apr 21, 2023 · 2 comments
Open

Partkeepr try to access to remote urls, could it be dangerous? #1265

sruedat opened this issue Apr 21, 2023 · 2 comments
Labels
help-requested indicates that an issue is seeking for help during setup, usage, etc. needs-triage incoming, please sort

Comments

@sruedat
Copy link

sruedat commented Apr 21, 2023

Hi, I've installed parkeepr from this source.
At the first time I did some probes with a virtual machine at home, and now that all is OK I've decided to put it on producction.

But my supprise is that partkeepr frontend page loads very very slow, I've found that my firewall is dropping some connections that partkeepr installation is trying to estabilsh:

api.snapcraft.io

and

pfote.drachenkatze.org

If I allow in my firewall access to these urls, partkeepr loads very fast but if I dont allow this urls the fronted goes slow again.

What is the porpuse of this external urls connections? (I've not found anything in the docummentation)

Thanks

@sruedat sruedat added help-requested indicates that an issue is seeking for help during setup, usage, etc. needs-triage incoming, please sort labels Apr 21, 2023
@Liebeg
Copy link

Liebeg commented Feb 6, 2024

drachenkatze.org seems to be tthe website of the original founder of PartKeepr.

@ludoc
Copy link

ludoc commented Aug 15, 2024

Hi,

i didn't reviewed all the code but connections blocked by your firewall are probably initiated by this :

->scalarNode('patreon_status')
->cannotBeEmpty()
->defaultValue('https://partkeepr.org/patreon.json')
->info('The URI from where the patreon status is loaded')
->end()

public function getPatreonStatus()
{
$statusURI = $this->container->getParameter("partkeepr.patreon.statusuri");
if ($statusURI === false) {
return false;
}
try {
$client = new Client();
$request = $client->createRequest('GET', $statusURI, ['timeout' => 3.14]);
$request->send();
return json_decode($request->getResponse()->getBody(), true);
} catch (\Exception $e) {
return false;
}
}
}

$aParameters["patreonStatus"] = $this->get("partkeepr_systemservice")->getPatreonStatus();

At this time, partkeepr.org is hosted on (or behind) pfote.drachenkatze.org so no problem on this

For api.snapcraft.io, I don't know where does it come from

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help-requested indicates that an issue is seeking for help during setup, usage, etc. needs-triage incoming, please sort
Projects
None yet
Development

No branches or pull requests

3 participants