ashokc schrieb:
I find that I am freely able to post to my production SOLR server,
from any other host that can run the post command. So somebody can
wipe out the whole index by posting a delete query.
Control this at the IP level, have your server listen on 127.0.0.1
or on a private subnet add
Take a look at the security section in the wiki, u could do this with
firewall rules or password access.
On Thursday, June 4, 2009, ashokc wrote:
>
> Hi,
>
> I find that I am freely able to post to my production SOLR server, from any
> other host that can run the post command. So somebody can wip
