From 347604c4332a038416f21efa75da4e01450950eb Mon Sep 17 00:00:00 2001
From: Aevann1 <randomname42029@gmail.com>
Date: Fri, 29 Jul 2022 15:23:34 +0200
Subject: [PATCH] make non-jannies unable to ping more than 3 ppl

---
 files/helpers/sanitize.py       |  6 ++++--
 files/routes/errors.py          |  5 +++++
 files/templates/errors/406.html | 21 +++++++++++++++++++++
 files/templates/errors/413.html |  2 +-
 files/templates/errors/500.html |  2 +-
 5 files changed, 32 insertions(+), 4 deletions(-)
 create mode 100644 files/templates/errors/406.html

diff --git a/files/helpers/sanitize.py b/files/helpers/sanitize.py
index ec33d6656..3def8839b 100644
--- a/files/helpers/sanitize.py
+++ b/files/helpers/sanitize.py
@@ -242,11 +242,13 @@ def sanitize(sanitized, edit=False):
 	sanitized = reddit_regex.sub(r'\1<a href="https://old.reddit.com/\2" rel="nofollow noopener noreferrer" target="_blank">/\2</a>', sanitized)
 	sanitized = sub_regex.sub(r'\1<a href="/\2">/\2</a>', sanitized)
 
+	v = getattr(g, 'v', None)
+
 	matches = [ m for m in mention_regex.finditer(sanitized) if m ]
 	names = set( m.group(2) for m in matches )
-	users = get_users(names,graceful=True)
+	if len(names) > 3 and not v.admin_level: abort(406)
+	users = get_users(names, graceful=True)
 
-	v = getattr(g, 'v', None)
 	for u in users:
 		if not u: continue
 		m = [ m for m in matches if u.username.lower() == m.group(2).lower() or u.original_username.lower() == m.group(2).lower() ]
diff --git a/files/routes/errors.py b/files/routes/errors.py
index a0d5191a6..0180f9eaa 100644
--- a/files/routes/errors.py
+++ b/files/routes/errors.py
@@ -21,6 +21,11 @@ def error_401(e):
 		argval = quote(f"{path}?{qs}", safe='')
 		return redirect(f"/login?redirect={argval}")
 
+@app.errorhandler(406)
+def error_406(e):
+	if request.headers.get("Authorization") or request.headers.get("xhr"): return {"error": "You can't ping more than 3 people!"}, 406
+	else: return render_template('errors/406.html', err=True), 406
+
 @app.errorhandler(403)
 def error_403(e):
 
diff --git a/files/templates/errors/406.html b/files/templates/errors/406.html
new file mode 100644
index 000000000..7bfa166cd
--- /dev/null
+++ b/files/templates/errors/406.html
@@ -0,0 +1,21 @@
+{% extends "default.html" %}
+
+{% block title %}
+<title>Too many pings</title>
+{% endblock %}
+
+{% block pagetype %}Too many pings{% endblock %}
+
+{% block content %}
+<div class="row justify-content-center">
+	<div class="col-10 col-md-5">
+	<div class="text-center px-3 my-8">
+		<img alt=":#marseyrage" loading="lazy" src="/e/marseyrage.webp">
+		<pre></pre>
+		<h1 class="h5">Too many pings</h1>
+			<p class="text-muted mb-5">You can't ping more than 3 people!</p>
+			<div><a href="/" class="btn btn-primary">Go to frontpage</a></div>
+		</div>
+	</div>
+</div>
+{% endblock %}
diff --git a/files/templates/errors/413.html b/files/templates/errors/413.html
index aaa3b43ee..86f3b9806 100644
--- a/files/templates/errors/413.html
+++ b/files/templates/errors/413.html
@@ -10,7 +10,7 @@
 <div class="row justify-content-center">
 	<div class="col-10 col-md-5">
 	<div class="text-center px-3 my-8">
-		<img alt=":#marseyretard:" loading="lazy" src="/e/marseyretard.webp">
+		<img alt=":#marseyretard:" loading="lazy" src="/e/marseychonker2.webp">
 		<pre></pre>
 		<h1 class="h5">Max file size is 8 MB (16 MB for paypigs)</h1>
 		<div><a href="/" class="btn btn-primary">Go to frontpage</a></div>
diff --git a/files/templates/errors/500.html b/files/templates/errors/500.html
index de4ffcc26..42db88e68 100644
--- a/files/templates/errors/500.html
+++ b/files/templates/errors/500.html
@@ -10,7 +10,7 @@
 <div class="row justify-content-center">
 	<div class="col-10 col-md-5">
 		<div class="text-center px-3 my-8">
-			<img alt=":#marseydead:" loading="lazy" src="/e/marseydead.webp">
+			<img alt=":#marseydead:" loading="lazy" src="/e/marseycarp3.webp">
 			<pre></pre>
 			<h1 class="h5">500 Internal Server Error</h1>
 			<p class="text-muted mb-5">Hiiiii it's carp! I think this error means that there's a timeout error. And I think that means something took too long to load so it decided not to work at all. If you keep seeing this on the same page <I>but not other pages</I>, then something is probably wrong with that specific function. It may not be called a function, but that sounds right to me. Anyway, ping me and I'll whine to someone smarter to fix it. Don't bother them. Thanks ily <3</p>