Merge pull request #5899 from annando/avoid-flooding

Avoid beeing flooded by invalid requests

diff --cc index.php
index 7ec3485d84a6dff6362c7502abbbc4f2d4022a8b,faa86575eb85285e4efdb360c282c9a122104f90..dc3dc80f60399111c24141ce2e472c120f67702e
--- 1/index.php
--- 2/index.php
+++ b/index.php
@@@ -46,8 -48,12 +46,12 @@@ if ($a->isMaxProcessesReached() || $a->
        System::httpExit(503, ['title' => 'Error 503 - Service Temporarily Unavailable', 'description' => 'System is currently overloaded. Please try again later.']);
  }
  
+ if (strstr($a->query_string, '.well-known/host-meta') and ($a->query_string != '.well-known/host-meta')) {
+       System::httpExit(404);
+ }
+ 
  if (!$a->getMode()->isInstall()) {
 -      if (Config::get('system', 'force_ssl') && ($a->get_scheme() == "http")
 +      if (Config::get('system', 'force_ssl') && ($a->getScheme() == "http")
                && (intval(Config::get('system', 'ssl_policy')) == SSL_POLICY_FULL)
                && (substr(System::baseUrl(), 0, 8) == "https://")
                && ($_SERVER['REQUEST_METHOD'] == 'GET')) {

diff --cc mod/xrd.php
Simple merge