forked from MarseyWorld/MarseyWorld
remove /bm
parent
b5dae244fd
commit
5577311a27
|
@ -17,14 +17,14 @@ def before_request():
|
||||||
if request.host != SITE:
|
if request.host != SITE:
|
||||||
stop(403, "Unauthorized host provided!")
|
stop(403, "Unauthorized host provided!")
|
||||||
|
|
||||||
if SITE == 'marsey.world' and request.path not in {'/kofi','/bm','/av'}:
|
if SITE == 'marsey.world' and request.path not in {'/kofi','/av'}:
|
||||||
stop(404)
|
stop(404)
|
||||||
|
|
||||||
if request.headers.get("CF-Worker"):
|
if request.headers.get("CF-Worker"):
|
||||||
stop(403, "Cloudflare workers are not allowed to access this website!")
|
stop(403, "Cloudflare workers are not allowed to access this website!")
|
||||||
|
|
||||||
g.agent = request.headers.get("User-Agent", "")
|
g.agent = request.headers.get("User-Agent", "")
|
||||||
if not g.agent and request.path not in {'/kofi','/bm','/av'}:
|
if not g.agent and request.path not in {'/kofi','/av'}:
|
||||||
stop(403, 'Please use a "User-Agent" header!')
|
stop(403, 'Please use a "User-Agent" header!')
|
||||||
|
|
||||||
if not get_setting('bots') and request.headers.get("Authorization"):
|
if not get_setting('bots') and request.headers.get("Authorization"):
|
||||||
|
|
|
@ -1473,57 +1473,6 @@ def gumroad():
|
||||||
return ''
|
return ''
|
||||||
|
|
||||||
|
|
||||||
@app.post("/bm")
|
|
||||||
@limiter.exempt
|
|
||||||
def bm():
|
|
||||||
data = json.loads(request.data)
|
|
||||||
|
|
||||||
ip = request.headers.get('CF-Connecting-IP')
|
|
||||||
|
|
||||||
if ip not in {'54.187.174.169','54.187.205.235','54.187.216.72'}:
|
|
||||||
print(STARS, flush=True)
|
|
||||||
print(f'/bm fail: {ip}')
|
|
||||||
print(STARS, flush=True)
|
|
||||||
stop(400)
|
|
||||||
|
|
||||||
data = data['data']['object']
|
|
||||||
|
|
||||||
if data['calculated_statement_descriptor'] != 'MARSEY':
|
|
||||||
return ''
|
|
||||||
|
|
||||||
id = data['id']
|
|
||||||
|
|
||||||
existing = g.db.get(Transaction, id)
|
|
||||||
if existing: return ''
|
|
||||||
|
|
||||||
amount = data['amount']/100
|
|
||||||
|
|
||||||
email = data['billing_details']['email']
|
|
||||||
if not email: return ''
|
|
||||||
email = email.strip().lower()
|
|
||||||
|
|
||||||
created_utc = data['created']
|
|
||||||
|
|
||||||
if data['description'] == 'rdrama.net (@rdrama.net) - Support':
|
|
||||||
type = "one-time"
|
|
||||||
else:
|
|
||||||
type = "monthly"
|
|
||||||
|
|
||||||
transaction = Transaction(
|
|
||||||
id=id,
|
|
||||||
created_utc=created_utc,
|
|
||||||
type=type,
|
|
||||||
amount=amount,
|
|
||||||
email=email
|
|
||||||
)
|
|
||||||
|
|
||||||
g.db.add(transaction)
|
|
||||||
|
|
||||||
claim_rewards_all_users()
|
|
||||||
|
|
||||||
return ''
|
|
||||||
|
|
||||||
|
|
||||||
@app.post("/av")
|
@app.post("/av")
|
||||||
@limiter.exempt
|
@limiter.exempt
|
||||||
def av():
|
def av():
|
||||||
|
|
Loading…
Reference in New Issue