Security and privacy

Mail bomb afther update 6-11-2018

 
Bas van Kollenburg
Mail bomb afther update 6-11-2018
 

Afther update from 6-11  get + 8000 emails like this, help

I disabled the mail but can,t worp, something to do with unittest.?

Thanks for hou help  Bas

Uitzondering gebeurd bij het aanroepen van core_competency\privacy\provider::get_contexts_for_userid.
Dit betekent dat plugin core_competency het verwerken van gegevens niet voltooid heeft. Volgende uitzondering kan doorgegegeven worden aan de ontwikkelaar van de plugin:

Fout bij het lezen van de databank
#0 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/lib/dml/mysqli_native_moodle_database.php(1184): moodle_database->query_end(false) #1 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/privacy/classes/local/request/contextlist.php(71): mysqli_native_moodle_database->get_recordset_sql('\n ...', Array) #2 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/competency/classes/privacy/provider.php(419): core_privacy\local\request\contextlist->add_from_sql('\n SE...', Array) #3 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/lib/moodlelib.php(7783): core_competency\privacy\provider::get_contexts_for_userid(1092) #4 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/privacy/classes/manager.php(578): component_class_callback('core_competency...', 'get_contexts_fo...', Array) #5 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/privacy/classes/manager.php(611): core_privacy\manager::component_class_callback('core_competency', 'core_privacy\\lo...', 'get_contexts_fo...', Array) #6 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/privacy/classes/manager.php(238): core_privacy\manager->handled_component_class_callback('core_competency', 'core_privacy\\lo...', 'get_contexts_fo...', Array) #7 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/admin/tool/dataprivacy/classes/task/initiate_data_request_task.php(81): core_privacy\manager->get_contexts_for_userid(1092) #8 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/lib/cronlib.php(185): tool_dataprivacy\task\initiate_data_request_task->execute() #9 /home/eerstehulp/domains/eerste-hulp-online.nl/public_html/lib/cronlib.php(74): cron_run_inner_adhoc_task(Object(tool_dataprivacy\task\initiate_data_request_task))
 
Average of ratings: -
Picture of Jeff Rader
Re: Mail bomb afther update 6-11-2018
Plugin developers

I think I'm seeing the same thing.  I am getting emails for users that have already been deleted from the system as requests for data deletion:

You have received a data request:

Type

Delete all of my personal data

User

(User's name)

Requested by

(My name)

Site

(My Website)

Comments

Automatically created from a scheduled task (pre-existing deleted user).

Date requested

Thursday, November 8, 2018, 11:00 AM

I'm getting hundreds of these as the cron job executes.  I think it is just taking previously deleted users and entering them as records into the data requests (/admin/tool/dataprivacy/datarequests.php).  Once they are processed there and the email goes out, there is an option to fully delete the user's data.

This is very taxing on my database.  The queries are taking a long time (>30 seconds)

SELECT ctx.id AS ctxid, ctx.path AS ctxpath, ctx.depth AS ctxdepth, ctx.contextlevel AS ctxlevel, ctx.instanceid AS ctxinstance FROM mdl_context ctx JOIN ( SELECT l.contextid FROM mdl_logstore_standard_log l WHERE l.userid = '1812' OR l.relateduserid = '1812' OR l.realuserid = '1812') target ON ctx.id = target.contextid 

Anything that could help this out?

I would really love it if the emails could be suppressed somehow. 

I suppose I could have the policy manager go to a mailbox that will blackhole, but that doesn't seem like a good solution.

 
Average of ratings: Useful (2)
Bas van Kollenburg
Re: Mail bomb afther update 6-11-2018
 

Now i'm getting also your emails like 

You have received a data request:

 

Anyone help?

Gr Bas

 
Average of ratings: -
Picture of Uwe Stange
Re: Mail bomb afther update 6-11-2018
 

As a fast fix I've disabled 

Create delete data request for pre-existing deleted users 

on …/admin/tool/task/scheduledtasks.php

 
Average of ratings: Useful (1)
Picture of Ralf Hilgenstock
Re: Mail bomb afther update 6-11-2018
Core developersParticularly helpful MoodlersTranslators

Hi

in latest version this feature is disabled by default.

Ralf

 
Average of ratings: -