Not a developer? Go to MovableType.com

Ask an Expert

mt-comments.cgi vulnerability?

Asked by doggone
Posted April 19, 2014.

My site host provider contacted me regarding very high cpu usage that seemed to be centered around mt-comment.cgi.

I am in the process of updating, but the active site is still MT 5.2.2.

I have turned off commenting for the main blog to see if that resolves the issue.

In looking through the release notes at movabletype.org, I am not seeing this as a particular vulnerability.

Thanks.

Back

4 Answers

Heideldesign. on April 21, 2014, 9:40 a.m. 返信

It’s possible that the file is being pinged by an automated script like a spambot. It would be worth the effort to rename the file to see if that reduces the traffic (don’t forget to update the config file and rebuild - see CommentScript).

Charlie Gorichanaz

Charlie Gorichanaz on April 21, 2014, 10:36 a.m. 返信

Hi there,

I added a block just under the page title that will automatically show up on any configuration directive documentation to make it clearer what the purpose is for people who land on the page via inbound links or searches.

Hopefully that helps!

Charlie Gorichanaz

Charlie joined Six Apart as a Japan based product manager for Movable Type in February 2014 after spending two years as a developer for 601am. Previously he was the web director of The Badger Herald while studying biochemistry at the University of Wisconsin-Madison.

Website: http://votecharlie.com/
Twitter: @CNG