remotes/1693045480750635534/spooky-22
Aevann1 2021-10-08 03:37:50 +02:00
parent 0c3a4749af
commit 74cb7017d4
3 changed files with 1 additions and 12 deletions

View File

@ -339,7 +339,6 @@ def admin_home(v):
return render_template("admin/admin_home.html", v=v, x=x) return render_template("admin/admin_home.html", v=v, x=x)
@app.post("/admin/disablesignups") @app.post("/admin/disablesignups")
@limiter.limit("1/second")
@admin_level_required(6) @admin_level_required(6)
@validate_formkey @validate_formkey
def disablesignups(v): def disablesignups(v):
@ -705,7 +704,6 @@ def admin_image_ban(v):
@app.post("/agendaposter/<user_id>") @app.post("/agendaposter/<user_id>")
@limiter.limit("1/second")
@admin_level_required(6) @admin_level_required(6)
@validate_formkey @validate_formkey
def agendaposter(user_id, v): def agendaposter(user_id, v):
@ -1059,7 +1057,6 @@ def unban_post(post_id, v):
@app.post("/distinguish/<post_id>") @app.post("/distinguish/<post_id>")
@limiter.limit("1/second")
@admin_level_required(1) @admin_level_required(1)
@validate_formkey @validate_formkey
def api_distinguish_post(post_id, v): def api_distinguish_post(post_id, v):
@ -1085,7 +1082,6 @@ def api_distinguish_post(post_id, v):
@app.post("/sticky/<post_id>") @app.post("/sticky/<post_id>")
@limiter.limit("1/second")
@admin_level_required(3) @admin_level_required(3)
def api_sticky_post(post_id, v): def api_sticky_post(post_id, v):
@ -1109,13 +1105,12 @@ def api_sticky_post(post_id, v):
else: return {"message": "Post unpinned!"} else: return {"message": "Post unpinned!"}
@app.post("/pin/<post_id>") @app.post("/pin/<post_id>")
@limiter.limit("1/second")
@auth_required @auth_required
def api_pin_post(post_id, v): def api_pin_post(post_id, v):
post = g.db.query(Submission).options(lazyload('*')).filter_by(id=post_id).first() post = g.db.query(Submission).options(lazyload('*')).filter_by(id=post_id).first()
if post: if post:
post.is_pinned = not (post.is_pinned) post.is_pinned = not post.is_pinned
g.db.add(post) g.db.add(post)
g.db.commit() g.db.commit()
@ -1173,7 +1168,6 @@ def api_unban_comment(c_id, v):
@app.post("/distinguish_comment/<c_id>") @app.post("/distinguish_comment/<c_id>")
@limiter.limit("1/second")
@auth_required @auth_required
def admin_distinguish_comment(c_id, v): def admin_distinguish_comment(c_id, v):

View File

@ -85,7 +85,6 @@ def shop(v):
@app.post("/buy/<award>") @app.post("/buy/<award>")
@limiter.limit("1/second")
@auth_required @auth_required
def buy(v, award): def buy(v, award):
if site_name == "Drama": if site_name == "Drama":

View File

@ -251,7 +251,6 @@ def settings_profile_post(v):
return {"error": "You didn't change anything."}, 400 return {"error": "You didn't change anything."}, 400
@app.post("/changelogsub") @app.post("/changelogsub")
@limiter.limit("1/second")
@auth_required @auth_required
@validate_formkey @validate_formkey
def changelogsub(v): def changelogsub(v):
@ -735,19 +734,16 @@ def settings_name_change(v):
new_name=request.values.get("name").strip() new_name=request.values.get("name").strip()
#make sure name is different
if new_name==v.username: if new_name==v.username:
return render_template("settings_profile.html", return render_template("settings_profile.html",
v=v, v=v,
error="You didn't change anything") error="You didn't change anything")
#verify acceptability
if not re.match(valid_username_regex, new_name): if not re.match(valid_username_regex, new_name):
return render_template("settings_profile.html", return render_template("settings_profile.html",
v=v, v=v,
error=f"This isn't a valid username.") error=f"This isn't a valid username.")
#verify availability
name=new_name.replace('_','\_') name=new_name.replace('_','\_')
x= g.db.query(User).options( x= g.db.query(User).options(