diff --git a/files/routes/chat.py b/files/routes/chat.py
index 1140f044d..58684c648 100644
--- a/files/routes/chat.py
+++ b/files/routes/chat.py
@@ -23,6 +23,7 @@ if SITE in ('pcmemes.net', 'localhost'):
 	@limiter.limit("5/second;30/minute")
 	@auth_required
 	def speak(data, v):
+		if not data: abort(403)
 
 		data={
 			"avatar": v.profile_url,
diff --git a/files/templates/chat.html b/files/templates/chat.html
index 35cbff2ea..4516835aa 100644
--- a/files/templates/chat.html
+++ b/files/templates/chat.html
@@ -49,7 +49,7 @@
 			<span id="loading-indicator" class="d-none"></span>
 		</div>
 		<i class="btn btn-secondary mr-2 fas fa-smile-beam" style="padding-top:0.65rem" onclick="loadEmojis('input-text')" aria-hidden="true" data-bs-toggle="modal" data-bs-target="#emojiModal" data-bs-placement="bottom" title="Add Emoji"></i>
-		<input id="input-text" type="text" class="form-control" placeholder="Message" autocomplete="off" autofocus />
+		<input id="input-text" minlength="1" maxlength="1000" type="text" class="form-control" placeholder="Message" autocomplete="off" autofocus>
 		<button id="chatsend" onclick="send()" class="btn btn-primary ml-3" type="submit">Send</button>
 	</div>
 </div>