Bug: updateLastRunTimestamp() race condition on component params #122

Closed
opened 2026-06-06 11:50:10 +00:00 by jmiller · 1 comment
Owner

Audit Finding

Severity: Low

Issue:
The system plugin reads full component params, modifies _pageload_last_run, and writes all params back. Concurrent page loads can overwrite each other's param changes.

Fix: Use JSON_SET on MySQL 5.7+, or store timestamp in a separate lightweight table.

Files: plg_system_mokojoomcross/MokoJoomCross.php

## Audit Finding **Severity:** Low **Issue:** The system plugin reads full component params, modifies `_pageload_last_run`, and writes all params back. Concurrent page loads can overwrite each other's param changes. **Fix:** Use JSON_SET on MySQL 5.7+, or store timestamp in a separate lightweight table. **Files:** `plg_system_mokojoomcross/MokoJoomCross.php`
Author
Owner

Branch created: feature/122-bug-updatelastruntimestamp-race-conditio

git fetch origin
git checkout feature/122-bug-updatelastruntimestamp-race-conditio
Branch created: [`feature/122-bug-updatelastruntimestamp-race-conditio`](https://git.mokoconsulting.tech/MokoConsulting/MokoJoomCross/src/branch/feature/122-bug-updatelastruntimestamp-race-conditio) ```bash git fetch origin git checkout feature/122-bug-updatelastruntimestamp-race-conditio ```
Sign in to join this conversation.