carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

add a ratelimit to media uploads

master
Aevann 2023-01-25 17:13:24 +02:00
parent 2a0e288e12
commit f8822ac14d
2 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
files/helpers/media.py
View File

@ -20,10 +20,19 @@ from files.helpers.settings import get_setting
from .config.const import * from .config.const import *
def media_ratelimit(v):
t = time.time() - 86400
count = g.db.query(Media).filter(Media.user_id == v.id, Media.created_utc > t).count()
if count > 50: abort(500)
def process_files(files, v): def process_files(files, v):
body = '' body = ''
if g.is_tor or not files.get("file"): return body if g.is_tor or not files.get("file"): return body
files = files.getlist('file')[:4] files = files.getlist('file')[:4]
if files:
media_ratelimit(v)
for file in files: for file in files:
if file.content_type.startswith('image/'): if file.content_type.startswith('image/'):
name = f'/images/{time.time()}'.replace('.','') + '.webp' name = f'/images/{time.time()}'.replace('.','') + '.webp'

4
files/routes/comments.py
View File

@ -153,6 +153,10 @@ def comment(v:User):
if request.files.get("file") and not g.is_tor: if request.files.get("file") and not g.is_tor:
files = request.files.getlist('file')[:4] files = request.files.getlist('file')[:4]
if files:
media_ratelimit(v)
for file in files: for file in files:
if file.content_type.startswith('image/'): if file.content_type.startswith('image/'):
oldname = f'/images/{time.time()}'.replace('.','') + '.webp' oldname = f'/images/{time.time()}'.replace('.','') + '.webp'