summaryrefslogtreecommitdiff
path: root/modules/simpletest/tests/xmlrpc.test
diff options
context:
space:
mode:
Diffstat (limited to 'modules/simpletest/tests/xmlrpc.test')
-rw-r--r--modules/simpletest/tests/xmlrpc.test34
1 files changed, 0 insertions, 34 deletions
diff --git a/modules/simpletest/tests/xmlrpc.test b/modules/simpletest/tests/xmlrpc.test
index bb74f059b..1a9ef2349 100644
--- a/modules/simpletest/tests/xmlrpc.test
+++ b/modules/simpletest/tests/xmlrpc.test
@@ -246,38 +246,4 @@ class XMLRPCMessagesTestCase extends DrupalWebTestCase {
$this->assertEqual($removed, 'system.methodSignature', 'Hiding builting system.methodSignature with hook_xmlrpc_alter works');
}
- /**
- * Test limits on system.multicall that can prevent brute-force attacks.
- */
- function testMulticallLimit() {
- $url = url(NULL, array('absolute' => TRUE)) . 'xmlrpc.php';
- $multicall_args = array();
- $num_method_calls = 10;
- for ($i = 0; $i < $num_method_calls; $i++) {
- $struct = array('i' => $i);
- $multicall_args[] = array('methodName' => 'validator1.echoStructTest', 'params' => array($struct));
- }
- // Test limits of 1, 5, 9, 13.
- for ($limit = 1; $limit < $num_method_calls + 4; $limit += 4) {
- variable_set('xmlrpc_multicall_duplicate_method_limit', $limit);
- $results = xmlrpc($url, array('system.multicall' => array($multicall_args)));
- $this->assertEqual($num_method_calls, count($results));
- for ($i = 0; $i < min($limit, $num_method_calls); $i++) {
- $x = array_shift($results);
- $this->assertTrue(empty($x->is_error), "Result $i is not an error");
- $this->assertEqual($multicall_args[$i]['params'][0], $x);
- }
- for (; $i < $num_method_calls; $i++) {
- $x = array_shift($results);
- $this->assertFalse(empty($x->is_error), "Result $i is an error");
- $this->assertEqual(-156579, $x->code);
- }
- }
- variable_set('xmlrpc_multicall_duplicate_method_limit', -1);
- $results = xmlrpc($url, array('system.multicall' => array($multicall_args)));
- $this->assertEqual($num_method_calls, count($results));
- foreach ($results as $i => $x) {
- $this->assertTrue(empty($x->is_error), "Result $i is not an error");
- }
- }
}